show status ipsec

show status ipsec { security-association [<SA_name> | all] | security-policy [<SP_name> | all]}

security-association [<SA_name> | all]

セキュリティアソシエーションのみ表示する

<SA_name>: セキュリティアソシエーションを指定する
all: すべてのセキュリティアソシエーション

security-policy [<SP_name> | all]

セキュリティポリシーのみ表示する

<SP_name>: セキュリティポリシーを指定する
all: すべてのセキュリティポリシー

実行例:IPsec-SAが折衝中の場合

# show status ipsec
192.0.2.1 198.51.100.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        State: larval
        Add Time: (not yet)
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
192.0.2.10/24[any] 198.51.100.10/24[any] any
        Type: ipsec Direction: in
        esp/tunnel/198.51.100.1-192.0.2.1/unique
198.51.100.10[any] 192.0.2.10/24[any] any
        Type: ipsec Direction: out
        esp/tunnel/192.0.2.1-198.51.100.1/unique

実行例:IPsec-SAが成立し有効な場合

# show status ipsec
192.0.2.1 198.51.100.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: mature
        Add Time: 2001-01-03 14:01:11
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: mature
        Add Time: 2001-01-03 14:01:11
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: mature
        Add Time: 2001-01-03 13:55:32
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: mature
        Add Time: 2001-01-03 13:55:26
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600
192.0.2.10/24[any] 198.51.100.10/24[any] any
        Type: ipsec Direction: in
        esp/tunnel/198.51.100.1 192.0.2.1/unique
198.51.100.10[any] 192.0.2.10/24[any] any
        Type: ipsec Direction: out
        esp/tunnel/192.0.2.1-198.51.100.1/unique

実行例:IPsec-SAが無効な場合

# show status ipsec
192.0.2.1 198.51.100.1
        ESP tunnel spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: dead
        Add Time: 2001-01-03 14:08:17
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600

実行例:IPsec-SAがライフタイムに達した場合

# show status ipsec
192.0.2.1 198.51.100.1
        ESP transport spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: dying
        Add Time: 2001-01-08 03:13:15
        Use Time: 2001-01-08 03:25:17
        Use Packets: 30
        Use Bytes: 3664
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP transport spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: dying
        Add Time: 2001-01-08 03:13:15
        Use Time: 2001-01-08 03:25:41
        Use Packets: 402
        Use Bytes: 30495
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP transport spi=xxxxxxxx(0xxxxxxx)
        Encap: AES128 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        Auth: HMAC-SHA1 0xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        State: dying
        Add Time: 2001-01-08 03:13:14
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
        Lifetime (soft/hard): 17280/21600
198.51.100.1 192.0.2.1
        ESP transport spi=xxxxxxxx(0xxxxxxx)
        State: larval
        Add Time: (not yet)
        Use Time: (not used)
        Use Packets: 0
        Use Bytes: 0
198.51.100.10[any] 192.0.2.10/24[any] any
        Type: ipsec Direction: in
        esp/transport/198.51.100.10-192.0.2.10/unique
198.51.100.1[any] 192.0.2.1/24[any] any
        Type: ipsec Direction: in
        esp/transport/198.51.100.1-192.0.2.1/unique
192.0.2.1/24[any] 198.51.100.10/24[any] any
        Type: ipsec Direction: out
        esp/transport/192.0.2.1-198.51.100.1/unique
192.0.2.1[any] 198.51.100.1/24[any] any
        Type: ipsec Direction: out
        esp/transport/192.0.2.1-198.51.100.1/unique

説明 : セキュリティアソシエーション情報


項目	項目の意味
`IPアドレス`	始点と終点のアドレス
`ESP transport spi`	ESPのSPI値
`Encap`	暗号鍵情報
`Auth`	認証情報
`State`	IPsecの状態 larval IPsec-SAが折衝中 mature IPsec-SAが有効 dead IPsec-SAが無効 dying ライフタイムが満了
`Add Time`	設定を追加した日時
`Use Time`	接続開始日時
`Use Packets`	使用パケット数
`Use Bytes`	使用Byte数
`Lifetime`	ライフタイム

説明 : セキュリティポリシー情報


項目	項目の意味
`IPアドレス[ポート]`	始点と終点のアドレスとポート
`プロトコル`	設定したプロトコル
`Type`	セキュリティの種別
`Direction`	通信の方向
`パケットに適用するIPsecのパラメータ`	セキュリティプロトコル / モード / 送信元アドレス-送信先アドレス / unique