Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 5 IPSec Configuration Commands
3Com Corporation
5-9
total phase-2 SAs: 2
Src Address Dst Address SPI Protocol Algorithm
10.1.1.1 10.1.1.2 300 ESP E:DES; A:HMAC-MD5-96
10.1.1.2 10.1.1.1 400 ESP E:DES; A:HMAC-MD5-96
Table 5-5 Brief information of IPSec SA
Item Description
total phase-2 SAs
Total number of SAs in the second
phase of IPSec negotiation
Src Address Local IP address
Dst Address Remote Ip address
SPI security parameter index
Protocol security protocol used by IPSec
Algorithm
The authentication algorithm and
encryption algorithm used by the
security protocol. A display beginning
with "E" in the algorithm stands for the
encryption algorithm, and a display
beginning with "A" stands for the
authentication algorithm.
# View the global duration of SA.
[3Com] display ipsec sa duration
ipsec sa global duration (traffic based): 1843200 kilobytes
ipsec sa global duration (time based): 3600 seconds
# View information of all the SAs.
[3Com] display ipsec sa
===============================
Interface: Ethernet1/0/0
path MTU: 1500
===============================
----------------------------------
IPsec policy name: "policy_isakmp"
sequence number: 10
mode: isakmp
----------------------------------
connection id: 4
in use settings = {tunnel}
tunnel local : 162.105.10.1
tunnel remote : 162.105.10.2
[inbound ah SAs]