display vpn

Purpose

Displays all VPN-related status information, including Security Association (SA) database entries and Security Policy Database (SPD) entries.

Note This command applies to Digi Cellular Family products only.

Required permissions

For Digi products with two or more users, set permissions to set permissions display=execute to use this command. See set permissions for details on setting user permissions for commands.

Syntax

display vpn

Examples

Display Virtual Private Network (VPN) status information

#> display vpn

SADB Table:

Source IP       Dest. IP        Protect Mode  SPI       Hash  Enc   TTL-sec   TTL-kb

IPSEC SPD Table:

Idx, Selector(local ip:port,remote ip:port, protocol),Inner policy, Outer policy, Protect Mode  Hash  Enc   Protect Mode  Hash
  0 any, any, any
       bypass
  1 10.13.11.96:0, 0.0.0.0:0, any
       esp     tunnl sha1  aes
  2 10.13.11.96:0, 0.0.0.0:0, any
       esp     tunnl sha1  aes
  3 any, 127.0.0.1:0, any
       bypass
  4 any, 10.13.11.96:0, any
       bypass
  5 any, 166.203.137.88:0, any
       bypass

IKE SA Table:

Source IP       Dest. IP        Enc   Hash  Auth    DH  Life(s)   Life(KB)
66.165.177.14   66.165.177.14           nul 0         0

IKE SPD Table:

Source IP       Dest. IP        Hash  Enc   Auth    DH  Life(s)   Life(KB)
166.203.137.94:066.165.177.14:0 md5   aes   psk     2   240       32768

See also

• Commands that display VPN-related connection and status information:
  • display ikesa
  • display ikespd
  • display ipsecspd
  • display sadb
  • display spd
  • set vpn
• The VPN command (see vpn.
• The VPN settings in the web interface (Network > Virtual Private Network (VPN) Settings) and the online help for these settings.
• The User Guide section titled Virtual Private Network (VPN) Settings.