display ipsec policy-template

Function

The display ipsec policy-template command displays information about the IPSec policy template.

This command is supported only on the NetEngine 8000 F1A.

Format

display ipsec policy-template [ { name templatename [ sequencenumber ] } | brief ]

Parameters

Parameter	Description	Value
name templatename	Indicates the name of an IPSec policy template.	It is a string of 1 to 15 case sensitive characters.
sequencenumber	Indicates the sequence number of an IPSec policy template.	It is an integer that ranges from 1 to 10000, where a smaller value indicates a higher priority.
brief	Displays brief information about all the IPSec policy templates.	-

Parameter

Description

Value

name templatename

Indicates the name of an IPSec policy template.

It is a string of 1 to 15 case sensitive characters.

sequencenumber

Indicates the sequence number of an IPSec policy template.

It is an integer that ranges from 1 to 10000, where a smaller value indicates a higher priority.

brief

Displays brief information about all the IPSec policy templates.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
ike	read

Usage Guidelines

The display ipsec policy-template brief command displays the following brief information about the IPSec policy template. In this case, the information is displayed in brief format.

Template name and sequence number
ACL number
IKE peer
Using the name parameter, you can view details on the specified IPSec policy template. In this case, the information is displayed in detailed format.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display information about an IPsec policy template.

<HUAWEI> display ipsec policy-template
===========================================
IPsec Policy Template Group: "pol"
===========================================

  -----------------------------
  Policy template name: "pol"
  sequence number: 1
  -----------------------------
    security data flow: 0
    ike-peer name:  
    perfect forward secrecy: None
    proposal name: 
    IPsec sa local duration(time based): 3600 seconds 
    IPsec sa local duration(traffic based): 1843200 kilobytes

# Display information about all the IPSec policy template.

<HUAWEI> display ipsec policy-template brief
current ipsec policy-template number: 1 
----------------------------------------
Policy-Template-Name     acl    ike-peer
test-1                   3000

**Table 1** Description of the **display ipsec policy-template** command output
Item	Description
IPsec Policy Template Group	Name of an IPsec policy template group.
IPsec sa local duration(time based)	Time-based remaining SA lifecycle (seconds).
IPsec sa local duration(traffic based)	Traffic-based remaining SA lifecycle.
Policy template name	Name of an IPsec template.
sequence number	Sequence number.
security data flow	Security data flow.
ike-peer	Indicates IKE peer involved.
ike-peer name	Name of an IKE peer.
perfect forward secrecy	Forward consistency check.
proposal name	IPsec proposal name.
current ipsec policy-template number	Indicates the number of the current IPSec policy template.
Policy-Template-Name	Indicates name and sequence number of an IPSec policy template.
acl	Indicates ACL used by an IPSec policy template.