HP-UX IPSec version A.02.00 manpages

ipsec_report(1M) ipsec_report(1M)
(IPSec Software Required)
The ipsec_report -gateway active
displays the following report:
-------------------
Active Gateway Policy Rule ---------------------
Rule Name: gwy_policy_name2 ID: 17
Cookie: 5 Priority: 3
Src IP Addr: 0::0 Prefix: 0
Dst IP Addr: fe80::230:6666:7777:8888
Prefix: 128
Network Protocol: MH Action: Forward
Tunnel Name: mipv6_tunnel_name
FLAGS: MIPv6
-------------------
Active Gateway Policy Rule ---------------------
Rule Name: default ID: 2 Cookie: 2
Action: Forward
REPORT: ipsec_report -tunnel
The
ipsec_report -tunnel
command displays the information about tunnel IPSec policies kept by
the Policy daemon.
Tunnel policy fields are defined as follows:
Tunnel Name
A character string used as the name of the tunnel policy.
ID An integer used internally by IPSec to index the entries.
Cookie
An integer used internally by IPSec to identify the entries.
Tunnel Src IP Addr
The source (local) tunnel endpoint IP address.
Tunnel Dst IP Addr
The destination (remote) tunnel endpoint IP address.
Src IP Address
The source proxy (end host) IP address. (The source end-to-end address for outbound packets;
the destination end-to-end address for inbound packets.)
Dst IP Address
The destination proxy (end host) IP address. (The destination end-to-end address for outbound
packets; the source end-to-end address for inbound packets.)
Prefix
The number of bits that must match when comparing IP addresses, beginning with the left-
most bit.
Port number
(This field is only present if the network protocol is TCP, UDP, or ALL.) The source or desti-
nation port number for the upper-layer protocol.
Dst IP Address
The destination proxy (end host) IP address.
Network Protocol
The upper-layer protocol in the IP header.
Action
The type of IPSec SAs for this tunnel. Possible values follow:
Dynamic key SA
Use dynamic keys to create IPSec SAs for the transform - an Authentication Header, AH,
and/or Encapsulating Security Payload, ESP.
Manual key SA
Use manual keys to create IPSec SAs for the transform.
State
(This field is only present for dynamic key SAs.) The state of the SAs. Possible values for
State are as follows:
HP-UX IPSec A.02.00 − 11 − Hewlett-Packard Company 51