R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

Field Descri

tion

peer Remote IP address of the SA

flag

Status of the SA:

• RD (READY)—The SA has been established

• ST (STAYALIVE)—This end is the initiator of the tunnel negotiation

• RL (REPLACED)—The tunnel has been replaced by a new one and will be deleted

later

• FD (FADING)—The soft lifetime is over but the tunnel is still in use. The tunnel will

be deleted when the hard lifetime is over

• TO (TIMEOUT)—The SA has received no keepalive packets after the last

keepalive timeout. If no keepalive packets are received before the next keepalive

timeout, the SA will be deleted

phase

The phase to which the SA belongs to:

• Phase 1—The phase for establishing the ISAKMP SA

• Phase 2—The phase for negotiating the security service. IPsec SAs are

established in this phase

doi Interpretation domain to which the SA belongs

status

Stateful failover status of the SA active or standby

This field appears only in an IPsec stateful failover scenario

# Display detailed information about the current IKE SAs.

<Sysname> display ike sa verbose

---------------------------------------------

connection id: 2

vpn-instance: 1

transmitting entity: initiator

status: active

---------------------------------------------

local ip: 4.4.4.4

local id type: IPV4_ADDR

local id: 4.4.4.4

remote ip: 4.4.4.5

remote id type: IPV4_ADDR

remote id: 4.4.4.5

authentication-method: PRE-SHARED-KEY

authentication-algorithm: HASH-SHA1

encryption-algorithm: DES-CBC

life duration(sec): 86400

remaining key duration(sec): 86379

exchange-mode: MAIN

diffie-hellman group: GROUP1

nat traversal: NO

# Display detailed information about the IKE SA with the connection ID of 2.

<Sysname> display ike sa verbose connection-id 2