3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

186 CHAPTER 11: IKE CONFIGURATION
■ Use the command display ike sa to check whether both parties have
established SA of Phase 1.
■ Use the command display ipsec sa to check whether the IPsec policy on
interface has established IPsec SA.
■ If the above two results display that one party has SA but the other does not,
then use the command reset ike sa to clear SA with error and re-originate
negotiation.