Ipsec examples, Amples, Showing ipsec security association information – Brocade Communications Systems Layer 3 Routing Configuration ICX 6650 User Manual
Page 292
274
Brocade ICX 6650 Layer 3 Routing Configuration Guide
53-1002603-01
Displaying OSPF V3 Information
IPsec examples
This section contains examples of IPsec configuration and the output from the IPsec-specific show
commands. In addition, IPsec-related information appears in general show command output for
interfaces and areas.
The show commands that are specific to IPsec are:
•
show ipsec sa
•
show ipsec policy
•
show ipsec statistics
The other show commands with IPsec-related information are:
•
show ipv6 ospf area
•
show ipv6 ospf interface
Showing IPsec security association information
The show ipsec sa command displays the IPsec security association databases, as follows.
Brocade#show ipsec sa
IPSEC Security Association Database(Entries:8)
SPDID(if) Dir Encap SPI Destination AuthAlg EncryptAlg
ALL in ESP 512 2001:db8:1::1 sha1 Null
eth1/1/1 out ESP 302 :: sha1 Null
eth1/1/1 in ESP 302 2001:db8:: sha1 Null
eth1/1/1 out ESP 512 2001:db8:1::2 sha1 Null
ALL in ESP 512 2001:db8:1::1 sha1 Null
eth1/1/2 out ESP 302 :: sha1 Null
eth1/1/2 in ESP 302 2001:db8:: sha1 Null
eth1/1/2 out ESP 512 2001:db8:1::2 sha1 Null
Syntax: show ipsec sa
State
The state between the Brocade device and the virtual neighbor. The state can
be one of the following:
•
Down
•
Attempt
•
Init
•
2-Way
•
ExStart
•
Exchange
•
Loading
•
Full
Interface
The IPv6 address of the virtual neighbor.
TABLE 56
OSPF V3 virtual neighbor information (Continued)
Field
Description