Westermo MR Series - Manual (Page 358)

358 6622-3201
Web Interface and Command Line Reference Guide www.westermo.com
Status > IPSec > IKE SAs 6.15
The Status > IPSec > IKE SAs page shows IKE V1 and IKE V2 SAs.
Peer ID
The ID of the remote unit.
Peer IP
The IP address of the remote unit.
Our IP
The IP address of the interface on the Westermo the eroute is on.
Session ID
The ID for this SA.
Time Left
The time remaining for the IKE Security Association to stay in force.
Status > IPSec > IPSec SAs > Dynamic tunnels 6.16
This page shows the status of IPSec SA’s for dynamic tunnels when using Egroups on a VPN
responder. The page has the same datails as Status > IPSec > IPSec SAs > Eroute n but only
details of dynamic tunnels are shown.
Using Text Commands
From the command line the sastat dyn command can be used to display Dynamic IPSec SA informa-
tion. The format of the command is:
sastat dyn <First Eroute> <Last Eroute>
where <First Eroute> and <Last Eroute> are optional.
sastat peer <peer-wildcard>
sastat peer <peer-IP>
<peer-wildcard> allows you to view a selection of sites, eg: sastat peer uk-north-*
<peer-IP> allows you to view a specific peer IP address.