display ipsec proposal
Syntax
display ipsec proposal [ proposal-name ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
proposal-name: Name of a proposal, a string of 1 to 32 characters.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display ipsec proposal command to display information about IPsec proposals.
If you do not specify any parameters, the command displays information about all IPsec proposals.
Related commands: ipsec proposal.
Examples
# Display information about all IPsec proposals.
<Sysname> display ipsec proposal IPsec proposal name: aaa encapsulation mode: tunnel transform: ah-new AH protocol: authentication sha1-hmac-96
Table 54: Output description
Field | Description |
---|---|
IPsec proposal name | Name of the IPsec proposal |
encapsulation mode | Encapsulation mode used by the IPsec proposal, transport or tunnel |
transform | Security protocol(s) used by the IPsec proposal: AH, ESP, or both. If both protocols are configured, IPsec uses ESP before AH. |
AH protocol | Authentication algorithm used by AH |
ESP protocol | Authentication algorithm and encryption algorithm used by ESP |