Cluster I/O Protocols (CIP) Configuration and Management Manual (H06.16+, J06.05+)

climconfig.vpn(1)
NAME
climconfig.vpn -- obtain information about virtual private networks
SYNOPSIS
CLIMCMD {clim-name|ip-address} climconfig vpn -status
[-prov {prov—name | all}] [-s src-ip -d dst-ip]
climconfig.vpn Description
This command displays the status of the VPN connection established between the source and
destination IP addresses. The security policy and the association loaded in the Security Policy
Database (SPD) and Security Association Database (SAD) are displayed in that order. -d and -s
are optional parameters; if they are omitted, the status of all the VPN connections is shown.
PARAMETERS
-s src-ip
Specifies the source IP address.
-d dst-ip
Specifies the destination IP address.
-prov
Specifies a provider name. This option is mandatory for CLIMs that have MULTIPROV set to
ON and cannot be used if MULTIPROV is set to OFF. Each provider has its own IPSec
configuration. The provider name is case-insensitive and always converted to UPPER case.
ERROR MESSAGES
The status for the VPN connection between src-ip and dst-ip is not found. Please check for
the correct options and retry again.
EXAMPLES
> CLIMCMD clim1 climconfig vpn -status
Security Policies from SPD:
10.2.2.0/24[any] 10.1.1.2[any] any
in ipsec
esp/tunnel/10.2.2.1-10.1.1.2/require
ah/tunnel/10.2.2.1-10.1.1.2/require
created: Jun 22 20:48:13 2008 lastused:
lifetime: 0(s) validtime: 0(s)
spid=8 seq=2 pid=369
refcnt=1
10.1.1.2[any] 10.2.2.0/24[any] any
out ipsec
esp/tunnel/10.1.1.2-10.2.2.1/require
ah/tunnel/10.1.1.2-10.2.2.1/require
created: Jun 22 20:48:13 2008 lastused:
lifetime: 0(s) validtime: 0(s)
spid=1 seq=1 pid=369
refcnt=1
Security Associations from SAD:
10.1.1.2 10.2.2.1
esp mode=tunnel spi=262906055(0x0faba0c7)
reqid=0(0x00000000)
E: 3des-cbc f1eee61a f2642ace 2c89c610 c245978d 7ea13336
133d84d2
A: hmac-md5 d34b8476 cb8bda72 9d1b8e0b 059f14ad
seq=0x00000000 replay=4 flags=0x00000000 state=mature
created: Jun 22 21:03:02 2008
current: Jun 22 21:03:22 2008
381