display ipsec proposal

Syntax

display ipsec proposal [ proposal-name ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

proposal-name: Name of a proposal, a string of 1 to 32 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display ipsec proposal command to display information about IPsec proposals.

If you do not specify any parameters, the command displays information about all IPsec proposals.

Related commands: ipsec proposal.

Examples

# Display information about all IPsec proposals.

<Sysname> display ipsec proposal

  IPsec proposal name: aaa
    encapsulation mode: tunnel
    transform: ah-new
    AH protocol: authentication sha1-hmac-96  

Table 54: Output description

Field

Description

IPsec proposal name

Name of the IPsec proposal

encapsulation mode

Encapsulation mode used by the IPsec proposal, transport or tunnel

transform

Security protocol(s) used by the IPsec proposal: AH, ESP, or both. If both protocols are configured, IPsec uses ESP before AH.

AH protocol

Authentication algorithm used by AH

ESP protocol

Authentication algorithm and encryption algorithm used by ESP