HP-UX IPSec version A.02.00 manpages
ipsec_report(1M) ipsec_report(1M)
(IPSec Software Required)
Ready
(SAs are ready for use)
SPI(s) Not Established
(the IKE daemon has not started negotiating the IPSec/MM SAs)
SPI(s) Being Established
(the IKE daemon is negotiating the IPSec/MM SAs)
Unknown
(error state).
SA Number 1
and SA Number 2
Information about the inbound and outbound SAs.
SPI (hex)
The Security Parameters Index (SPI). The SPI is included in the IPSec AH or ESP protocol
header transmitted to the remote system. The SPI is also used to index IPSec SA entries in the
kernel Security Association database.
SA Type
Indicates the IPSec transform for this SA. Possible values are
AH (Authentication Header) and
ESP (Encapsulating Security Payload).
Authentication Algorithm
(This field is only present if the Security Association Type is AH or authenticated ESP.) The
authentication algorithm used for the SA, as negotiated with the remote system.
Encryption Algorithm
(This field is only present if the Security Association Type is ESP.) The encryption algorithm
used for the SA, as negotiated with the remote system.
Src IP Addr
The source IP address for this SA.
Dst IP Addr
The destination IP address for this SA.
SA direction
The direction for this SA. Possible values are
INBOUND and OUTBOUND
.
The
ipsec_report -tunnel command displays the following report:
-------------------------------------------------------------------------
ipsec_report -tunnel
-------------------- Tunnel Policy Rule ----------------------
Tunnel Name: mipv6_tunnel_name ID: 10 Cookie: 3
Tunnel Src IP Addr: fe80::260:1111:2222:3333 Tunnel Dst IP Addr: fe80::230:6666
:7777:8888
Src IP Addr: 0::0 Prefix: 0
Dst IP Addr: fe80::230:6666:7777:8888 Prefix: 128
Network Protocol: MH Action: Manual Key SA
Transform: ESP-DES-HMAC-SHA1
-- SA Number 1 --
SPI (hex): 3EB
SA Type: ESP
Authentication Algorithm: HMAC-SHA1
Encryption Algorithm: DES-CBC
Src IP Addr: fe80::230:6666:7777:8888
Dst IP Addr: fe80::260:1111:2222:3333
SA direction: INBOUND
-- SA Number 2 --
SPI (hex): 3EA
SA Type: ESP
Authentication Algorithm: HMAC-SHA1
Encryption Algorithm: DES-CBC
Src IP Addr: fe80::260:b1111:2222:3333
Dst IP Addr: fe80::230:6666:7777:8888
52 Hewlett-Packard Company − 12 − HP-UX IPSec A.02.00