show security ipsec control-plane-security-associations
Syntax
show security ipsec control-plane-security-associations <brief | detail> <sa-name sa-name>
Description
Display information about manual IPsec security associations (SAs) applied to OSPF or OSPFv3 interfaces or virtual links.
Options
-
brief|detail—(Optional) Display the specified level of output. -
sa-name sa-name—Name of the manual SA.
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show security ipsec
control-plane-security-associations command. Output fields are listed
in the approximate order in which they appear.
|
Field Name |
Field Description |
|---|---|
|
|
Name of the SA. |
|
|
IPsec protocol followed by encryption algorithm and authentication algorithm. |
|
|
SPI value. |
|
|
Total number of active manual SAs for application to OSPF or OSPFv3 interfaces or virtual links. |
Sample Output
- show security ipsec control-plane-security-associations
- show security ipsec control-plane-security-associations sa-name
- show security ipsec control-plane-security-associations detail
show security ipsec control-plane-security-associations
user@host> show security ipsec control-plane-security-associations Name Algorithm SPI test_sa ESP:3des/md5 3e8 test_sa ESP:3des/md5 3e8 test_sa2 ESP:3des/sha1 7d1 test_sa2 ESP:3des/sha1 7d1 Total active security-associations: 2
show security ipsec control-plane-security-associations sa-name
user@host> show security ipsec control-plane-security-associations sa-name test_sa Name Algorithm SPI test_sa ESP:3des/md5 3e8 test_sa ESP:3des/md5 3e8 Total active security-associations: 1
show security ipsec control-plane-security-associations detail
user@host> show security ipsec control-plane-security-associations detail Direction: inbound, SA Name: test_sa, Protocol: ESP:, Authentication: md5 SPI: 3e8, AUX-SPI: 0, Mode: transport, Type: manual, ID: 1, Direction: outbound, SA Name: test_sa, Protocol: ESP:, Authentication: md5 SPI: 3e8, AUX-SPI: 0, Mode: transport, Type: manual, ID: 2, Direction: inbound, SA Name: test_sa2, Protocol: ESP:, Authentication: sha1 SPI: 7d1, AUX-SPI: 0, Mode: transport, Type: manual, ID: 3, Direction: outbound, SA Name: test_sa2, Protocol: ESP:, Authentication: sha1 SPI: 7d1, AUX-SPI: 0, Mode: transport, Type: manual, ID: 4,
Platform-Specific manual IPsec SA Behavior
Use Feature Explorer to confirm platform and release support for specific features.
Use the following table to review platform-specific behavior for your platforms.
|
Platform |
Difference |
|---|---|
|
SRX Series |
On SRX400, SRX440, and SRX440-2AC devices that support manual
IPsec SAs, use |
Release Information
Command introduced in Junos OS Release 12.1X46-D20.