show ipsec instance

Use this command to display IPsec instance information.

Syntax

show ipsec instance [vlan vlan-id] [instance_id instance_id] [index index] [static | dynamic] [brief]

Parameters

vlan vlan-id (Optional) Filters the display by the specified VLAN.
instance_id instance_id (Optional) Filters the display based upon the IPsec instance ID.
index index (Optional) Filters the display based upon the instance index.
static | dynamic (Optional) Filters the display based upon either static or dynamic instances.
brief (Optional) Displays a summary version of IPsec instance information

Defaults

If no option is specified, all IPsec instances are displayed.

Mode

All command modes.

Usage

The SA index and instance IDs for all instances are available by entering the show ipsec instance command without specifying an option.

The current release only supports the manual configuration of a default instance, specified as either default or 0. An instance ID above 64 is dynamically created when you provision authentication or encryption for OSPFv3.

Example

This example shows how to display all IPsec information for all instances:

System(su)->show ipsec instance
IPsec instance default (Index: 2):
 Vrf Id:                   0
 Persistence:              static
 Owner:                    cli
 Attached SAs:             0
 Attached Flows:           0
 Attached Vlans:           all
IPsec instance 65 (Index: 1):
 Vrf Id:                   0
 Persistence:              dynamic
 Owner:                    ospf
 Attached SAs:             2
 Attached Flows:           2
 Attached Vlans:           4000
Number of Instances displayed: 2