You can use the ipsec sa show
command to display
security associations.
You can display any of the following:
- The entire contents of the Security Associations Database (SAD)
- An individual entry in the SAD identified by the Security Parameter Index (SPI)
- A group of entries that include all of the following:
- Source and destination addresses
- Security protocol (AH or ESP)
- Direction (relative to your storage system)
- Upper-level protocols specified
Note: To learn the SPI for a database entry, you must first display the
entire contents of the SAD.
