R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101
40
Parameters
active: Displays the summary information of active IKE SAs in an IPsec stateful failover scenario.
standby: Displays the summary information of standby IKE SAs in an IPsec stateful failover scenario.
verbose: Displays detailed information.
connection-id: Displays detailed information about IKE SAs by connection ID, in the range of 1 to
2000000000.
remote-address: Displays detailed information about IKE SAs by remote address.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use display ike sa to display information about the current IKE SAs.
If you do not specify any parameters or keywords, the command displays brief information about the
current IKE SAs.
Related commands: ike proposal and ike peer.
Examples
# Display brief information about the current IKE SAs.
<Sysname> display ike sa
total phase-1 SAs: 1
connection-id peer flag phase doi
----------------------------------------------------------
1 202.38.0.2 RD|ST 1 IPSEC
2 202.38.0.2 RD|ST 2 IPSEC
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING TO—TIMEOUT
# Display brief information about IKE SAs in an IPsec stateful failover scenario.
<Sysname> display ike sa
total phase-1 SAs: 1
connection-id peer flag phase doi status
--------------------------------------------------------------------
1 202.38.0.2 RD|ST 1 IPSEC ACTIVE
2 202.38.0.2 RD|ST 2 IPSEC ACTIVE
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING TO—-TIMEOUT
Table 13 Command output
Field Descri
p
tion
total phase-1 SAs Total number of SAs for phase 1
connection-id Identifier of the ISAKMP SA