R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

66
ESP spi: 23456 (0x5ba0)
ESP string-key:
ESP encryption hex key: 1234567890abcdef1234567890abcdef1234567812345678
ESP authentication hex key: 1234567890abcdef1234567890abcdef
outbound AH setting:
AH spi:
AH string-key:
AH authentication hex key:
outbound ESP setting:
ESP spi: 23456 (0x5ba0)
ESP string-key:
ESP encryption hex key: 1234567890abcdef1234567890abcdef1234567812345678
ESP authentication hex key: 1234567890abcdef1234567890abcdef
Table 16 Command output
Field Description
security data flow ACL referenced by the IPsec policy.
Interface Interface to which the IPsec policy is applied.
Protocol
Name of the protocol to which the IPsec policy is applied. (This field is not
displayed when the IPsec policy is not applied to any routing protocol.)
sequence number Sequence number of the IPsec policy.
mode
Negotiation mode of the IPsec policy, which can be:
• manual: Manual mode
• isakmp: IKE negotiation mode
• template: IPsec policy template mode
selector mode Data flow protection mode of the IPsec policy, standard or aggregation.
ike-peer name IKE peer referenced by the IPsec policy.
tunnel local address Local IP address of the tunnel.
tunnel remote address Remote IP address of the tunnel.
perfect forward secrecy Whether PFS is enabled.
proposal name Proposal referenced by the IPsec policy.
policy enable Whether the IPsec policy is enabled or not.
Synchronization inbound
anti-replay-interval
Inbound anti-replay window information synchronization interval, expresses in
the number of received packets.
Synchronization outbound
anti-replay-interval
Outbound anti-replay sequence number synchronization interval, expresses in
the number of sent packets.
inbound/outbound AH/ESP
setting
AH/ESP settings in the inbound/outbound direction, including the SPI and
keys.