NSX CLI Guide

get ipsecvpn ikesa active logical-router <uuid-string-arg>

Display all IKE security associations in active state.

Parameters:

Option Description
<uuid> Generic UUID string argument
Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$


Example:

nsx-edge-1> get ipsecvpn ikesa active logical-router d88806dc-0a12-41a5-ab18-fce703027b35 Total Number of Active IKE SAs: 1 IKE Version : IKEv2 IKE Status : Up IKE Session ID : 2 Session Name : Tunnel-7acc1289-abd44ebf-84fcdf8a-1e541514 Session Type : Policy Based IKE SPI Initiator : 0x91fb9d4b6d5572e9 IKE SPI Responder : 0x343ca26af10c7513 Role : Initiator Number of Child SA Pairs : 1 Created Timestamp : 2019-03-19 10:56:05 IKE SA Uptime : 22852 sec IKE SA Lifetime : 86400 sec DPD Probe Interval : 60 sec IP Address: Local : 192.168.128.1 Remote : 1.1.5.100 Identity: Local : 192.168.128.1 (ipv4) Remote : 1.1.5.100 (ipv4) Algorithm: Encryption : aes128-cbc Authentication : hmac-sha2 PRF : hmac-sha2 DH Group : 14 Authentication Method : Pre-shared key ----------------------------------------

Mode:

Basic

Availability: