R2511-HP MSR Router Series Security Command Reference(V5)

576
Key size : 128
Sig hash algorithm : SHA1
Sig key length (bit) : 1024
TEK Policy:
Interface Ethernet1/1:
IPsec SA:
SPI: 0x9AE5951E(2598737182)
Transform: ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
SA timing:
remaining key lifetime (sec): 190
Anti-replay detection: Disabled
IPsec SA:
SPI: 0x12C55CFF(314924287)
Transform: ESP-ENCRYPT-AES-128 ESP-AUTH-SHA1
SA timing:
remaining key lifetime (sec): 402
Anti-replay detection: Disabled
Table 93 Command output
Field Description
Group Name GDOI GM group name.
Group Identity GDOI GM group ID (a number or an IPv4 address).
Rekeys Received Number of rekey messages received.
IPsec SA Direction
IPsec SA direction: Both or Inbound (not supported at
present).
Group Server List
KS IP address list in the GDOI GM group. The list can
contain eight addresses at most.
Group Member IP address of the GM.
VPN instance
VPN instance name of the MPLS L3VPN to which the GM
belongs.
Registration status
Registration status: Registered, Registering, or Not
registered.
Registered with IP address of the KS with which the GM registers.
Re-register in Period of time after which the GM re-registers with a KS.
Succeeded registrations Number of successful registrations.
Attempted registrations Number of registration attempts.
Last rekey from
The KS from which the GM receives the last rekey
message.
Last rekey seq num Sequence number of the last received rekey message.