Administrator Guide

Example
Table 7. show crypto ipsec sa ipv6 Command Description
Field Description
Interface
IPv6 interface.
Link local address
IPv6 address of interface
IPSecv6 policy name
Name of the IPsec security policy applied to the
interface.
inbound/outbound ah
Authentication policy applied to inbound or
outbound traffic.
inbound/outbound esp
Encryption policy applied to inbound or outbound
traffic.
spi
Security policy index number used to identify the
policy.
inbound/outbound esp
Encryption policy applied to inbound or outbound
traffic.
spi
Security policy index number used to identify the
policy.
transform
Security algorithm that is used to provide
authentication, integrity, and confidentiality.
in use settings
Transform that the SA uses (only transport mode
is supported).
replay detection support Y: An SA has enabled the replay detection
feature.
N: The replay detection feature is not enabled.
STATUS
ACTIVE: The authentication or encryption policy
is enabled on the interface.
Related
Commands
show crypto ipsec policy – displays the configuration of IPsec authentication and encryption policies.
Example
Dell#show crypto ipsec policy
Dell#show crypto ipsec sa ipv6
Interface: TenGigabitEthernet 0/0
Link Local address: fe80::201:e8ff:fe40:4d10
IPSecv6 policy name: OSPFv3-1-500
inbound ah sas
spi : 500 (0x1f4)
transform : ah-md5-hmac
in use settings : {Transport, }
replay detection support : N
STATUS : ACTIVE
outbound ah sas
spi : 500 (0x1f4)
transform : ah-md5-hmac
in use settings : {Transport, }
replay detection support : N
STATUS : ACTIVE
inbound esp sas
outbound esp sas
1250 Open Shortest Path First (OSPFv2 and OSPFv3)