R2511-HP MSR Router Series Security Command Reference(V5)

191
Table 22 Command output
Field Descri
p
tion
Src Address
Local IP address.
If this address is not concerned, this field displays an em dash (—).
Dst Address
Remote IP address.
If this address is not concerned, this field displays an em dash (—).
SPI Security parameter index.
Protocol Security protocol used by IPsec.
Algorithm
Authentication algorithm and encryption algorithm used by the security protocol,
where E indicates the encryption algorithm and A indicates the authentication
algorithm. A value of NULL means that type of algorithm is not specified.
display ipsec session
Use display ipsec session to display information about IPsec sessions.
Syntax
display ipsec session [ tunnel-id integer ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
integer: Specifies the ID of the IPsec tunnel, in the range of 1 to 2000000000.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
If you do not specify any parameters, the command displays information about all IPsec sessions.
IPsec can find matched tunnels directly by session, reducing the intermediate matching procedures and
improving the forwarding efficiency. A session is identified by the quintuplet of protocol, source IP
address, source port, destination IP address, and destination port.
Examples
# Display information about all IPsec sessions.
<Sysname> display ipsec session
------------------------------------------------------------
total sessions : 2
------------------------------------------------------------