display ipsec { ipv6-policy-template | policy-template }
Use display ipsec { ipv6-policy-template | policy-template } to display information about IPsec policy templates
Syntax
display ipsec { ipv6-policy-template | policy-template } [ template-name [ seq-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv6-policy-template: Displays information about IPv6 IPsec policy templates.
policy-template: Displays information about IPv4 IPsec policy templates.
template-name: Specifies an IPsec policy template by its name, a case-insensitive string of 1 to 63 characters.
seq-number: Specifies an IPsec policy template entry by its sequence number in the range of 1 to 65535.
Usage guidelines
If you do not specify any parameters, this command displays information about all IPsec policy templates.
If you specify an IPsec policy template name and a sequence number, this command displays information about the specified IPsec policy template entry. If you specify an IPsec policy template name without any sequence number, this command displays information about all IPsec policy template entries with the specified name.
Examples
# Display information about all IPv4 IPsec policy templates.
<Sysname> display ipsec policy-template ----------------------------------------------- IPsec Policy Template: template ----------------------------------------------- --------------------------------- Sequence number: 1 --------------------------------- Description: This is policy template Traffic Flow Confidentiality: Disabled Security data flow : Selector mode: standard Local address: IKE profile: IKEv2 profile: Remote address: 162.105.10.2 Transform set: testprop IPsec SA local duration(time based): 3600 seconds IPsec SA local duration(traffic based): 1843200 kilobytes SA idle time:
# Display information about all IPv6 IPsec policy templates.
<Sysname> display ipsec ipv6-policy-template ----------------------------------------------- IPsec Policy Template: template6 ----------------------------------------------- --------------------------------- Sequence number: 1 --------------------------------- Description: This is policy template Traffic Flow Confidentiality: Disabled Security data flow : Selector mode: standard Local address: IKE profile: IKEv2 profile: Remote address: 200::1 Transform set: testprop IPsec SA local duration(time based): 3600 seconds IPsec SA local duration(traffic based): 1843200 kilobytes SA idle time:
Table 39: Command output
Field | Description |
|---|---|
IPsec Policy Template | IPsec policy template name. |
Sequence number | Sequence number of the IPsec policy template entry. |
Description | Description of the IPsec policy template. |
Traffic Flow Confidentiality | Whether Traffic Flow Confidentiality (TFC) padding is enabled. |
Security data flow | ACL used by the IPsec policy template. |
Selector mode | Data flow protection mode of the IPsec policy template: standard, aggregation, or per-host. |
Local address | Local end IP address of the IPsec tunnel. |
IKE profile | IKE profile used by the IPsec policy template. |
IKEv2 profile | IKEv2 profile used by the IPsec policy template. |
Remote address | Remote end IP address of the IPsec tunnel. |
Transform set | Transform set used by the IPsec policy template. |
IPsec SA local duration(time based) | Time-based IPsec SA lifetime, in seconds. |
IPsec SA local duration(traffic based) | Traffic-based IPsec SA lifetime, in kilobytes. |
SA idle time | Idle timeout of the IPsec SA, in seconds. |
Related commands
ipsec { ipv6-policy | policy } isakmp template