NSX CLI Guide

get ipsecvpn ipsecsa logical-router <uuid-string-arg> ruleid <ipsec-vpn-rule-id-arg>

Display IPSec SA with specific rule id from control plane.

Parameters:

Option Description
<uuid> Generic UUID string argument
Allowed pattern: ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$
<rule-id> Rule ID


Example:

nsx-edge-1> get ipsecvpn ipsecsa ruleid 22 Total Number of IPSec SA Pairs: 1 Session ID : 2 Created Timestamp : 2018-04-10 03:58:33 Local TS : ipv4(192.168.2.0-192.168.2.255) Remote TS : ipv4(172.16.2.0-172.16.2.255) SPI In : 0xd03e65b0 SPI Out : 0xcbebe1e9 Rule ID In : 22 Rule ID Out : 2147483670 SA Uptime : 184 sec SA Lifetime : 1200 sec Local Endpoint : 10.0.0.1 Remote Endpoint: 10.1.0.1 Algorithm: aes128-cbc/hmac-sha2/14 NAT-T: False, ESN: False, DF-Policy: Copy Anti-Replay Window Size: 960, Role: Initiator ----------------------------------------

Mode:

Basic

Availability: