R2511-HP MSR Router Series Security Command Reference(V5)

197
flow:
current Encrypt-card:
# Display information about IPsec tunnels in aggregation mode.
<Sysname> display ipsec tunnel
total tunnel: 2
------------------------------------------------
connection id: 4
perfect forward secrecy:
SA's SPI:
inbound : 2454606993 (0x924e5491) [ESP]
outbound : 675720232 (0x2846ac28) [ESP]
tunnel :
local address: 44.44.44.44
remote address : 44.44.44.45
flow :
as defined in acl 3001
current Encrypt-card :
Table 26 Command output
Field Description
connection id Connection ID, used to uniquely identify an IPsec Tunnel.
perfect forward secrecy
Perfect forward secrecy, indicating which DH group is to be used for fast
negotiation mode in IKE phase 2.
SA's SPI SPIs of the inbound and outbound SAs.
tunnel Local and remote addresses of the tunnel.
flow
Data flow protected by the IPsec tunnel, including source IP address,
destination IP address, source port, destination port and protocol.
as defined in acl 3001 The IPsec tunnel protects all data flows defined by ACL 3001.
current Encrypt-card
Encryption card interface used by the current tunnel. This field is not displayed
if the interface is not used.
encapsulation-mode
Use encapsulation-mode to set the encapsulation mode that the security protocol uses to encapsulate IP
packets.
Use undo encapsulation-mode to restore the default.
Syntax
encapsulation-mode { transport | tunnel }
undo encapsulation-mode
Default
A security protocol encapsulates IP packets in tunnel mode.
Views
IPsec transform set view, IPsec policy view, IPsec policy template view, IPsec profile view