Reference Guide

Version Description
9.1.(0.0) Introduced on the S4810 and Z9000.
8.4.2.0 Introduced on the E-Series TeraScale.
8.3.19.0 Introduced on the S4820T.
Usage Information
The show crypto ipsec sa ipv6 command output displays security
associations set up for OSPFv3 links in IPsec authentication and encryption policies
on the router.
Example
Table 5. show crypto ipsec sa ipv6 Command Description
Field Description
Interface
IPv6 interface.
Link local address
IPv6 address of interface
IPSecv6 policy name
Name of the IPsec security policy
applied to the interface.
inbound/outbound ah
Authentication policy applied to
inbound or outbound traffic.
inbound/outbound esp
Encryption policy applied to inbound
or outbound traffic.
spi
Security policy index number used to
identify the policy.
inbound/outbound esp
Encryption policy applied to inbound
or outbound traffic.
spi
Security policy index number used to
identify the policy.
transform
Security algorithm that is used to
provide authentication, integrity, and
confidentiality.
in use settings
Transform that the SA uses (only
transport mode is supported).
replay detection support Y: An SA has enabled the replay
detection feature.
N: The replay detection feature is not
enabled.
STATUS
ACTIVE: The authentication or
encryption policy is enabled on the
interface.
1504
Open Shortest Path First (OSPFv2 and OSPFv3)