Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 5 IPSec Configuration Commands
3Com Corporation
5-10
spi: 3752719292 (0xdfadf3bc)
transform: AH-SHA1HMAC96
sa remaining key duration (bytes/sec): (1887436384/3594)
max received sequence-number: 4
[inbound esp SAs]
spi: 74180629 (0x46be815)
transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5
sa remaining key duration (bytes/sec): (1887436528/3594)
max received sequence-number: 4
[outbound esp SAs]
spi: 1394075637 (0x5317e7f5)
transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5
sa remaining key duration (bytes/sec): (1887436464/3594)
max sent sequence-number: 5
[outbound ah SAs]
spi: 2132905296 (0x7f218d50)
transform: AH-SHA1HMAC96
sa remaining key duration (bytes/sec): (1887436336/3594)
max sent sequence-number: 5
Table 5-6 Detailed information of IPSec SA
Item Description
Interface Interface using ipsec policy
path MTU
Maximum IP packet length sent from the
interface
ipsec policy
ipsec policy used, including name,
sequence number and negotiation
method
connection id security tunnel identifier
in use settings
IPSec mode, including two types:
transport mode and tunnel mode
tunnel local local IP address
tunnel remote remote IP address
inbound SA information of the inbound end
transform proposal used by the ipsec policy
sa remaining key duration rest sa duration of SA
max received sequence-number
maximum sequence number of the
received packets (the anti-replay
function provided by the security
protocol)
outbound SA information of the outbound end