3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

366 CHAPTER 22: IPSEC CONFIGURATION COMMANDS
View
Any view
Parameter
brief: Displays brief information about all the IPsec policies.
name: Displays information of the IPsec policy with the name policy-name and
sequence number seq-number.
policy-name: Name of an IPsec policy.
seq-number: Sequence number of an IPsec policy.
If no argument has been specified, the details of all the IPsec policies will be
displayed. If name policy-name has been specified but seq-number has not, the
information of the specified IPsec policy group will be listed out.
Description
Use the display ipsec policy command to view information about the IPsec
policy.
The brief keyword is used for displaying brief information about all the IPsec
policies, whose display format is the brief format (see the following example). The
brief keyword can be used for quick display of all the IPsec policies. Brief
information includes: name and sequence number, negotiation mode, access
control list, proposal, local address, and remote address.
The other command words are used to display the detailed information about the
IPsec policy, whose display format is the detailed format (refer to the following
example).
Related command: ipsec policy (system view).
Example
# View brief information about all the IPsec policies.
<SecBlade_VPN> display ipsec policy brief
IPsec-Policy-Name Mode acl Local-Address Remote-Address
------------------------------------------------------------------------
policy1-1 isakmp 3000 172.16.2.1
policy2-1 manual 3001 172.16.2.1 172.16.2.2
# View information about all the IPsec policies
Tabl e 270 Description on the fields of the display ipsec policy command
Field Description
IPsec-Policy-Name Name and sequence number of an IPsec policy (the name and the
sequence number are separated by "-")
Mode negotiation method used by an IPsec policy
acl access control list used by an IPsec policy
Local Address local IP address
Remote Address remote IP address
ike-peer name In ISAKMP negotiation mode, the name of the IKE peer used by an IPsec
policy (the name is not displayed in the manual mode)