display ike peer

Function

The display ike peer command displays the configuration of IKE peer.

This command is supported only on the NetEngine 8000 F1A.

Format

display ike peer [ name peer-name | brief ]

Parameters

Parameter Description Value
name peer-name

Indicates the name of IKE peer.

It is a string of 1 to 15 case sensitive characters.

brief

displays the brief configuration information of IKE peer.

-

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
ike read

Usage Guidelines

The output of the display ike peer command provides the following information:

  • Name of the IKE peer
  • Negotiation mode
  • Authentication key
  • Certificate file name
  • IKE proposal
  • Type of the local ID
  • IP address of the peer
  • Name of the VPN instance
  • IKE version
  • Remote ID of IKE peer
  • Whether NAT traversal is enabled

Example

The actual command output varies according to the device. The command output here is only an example.

# Display configurations of IKE peer named peer1.
<HUAWEI> display ike peer name peer1
---------------------------
 IKE Peer: peer1
   exchange mode: main on phase 1
   pre-shared-key: ******
   local certificate file name: 
   proposal: 
   local id type: ip 
   peer ip address: 0.0.0.0 255.255.255.255 
   vpn: 
   authentic ip address: 0.0.0.0 255.255.255.255 
   version: v2
   peer id: 
   sa binding vpn: 
   nat traversal: disable  
   SM4 version: standard  
   pki whitelist: disable 
---------------------------
Table 1 Description of the display ike peer command output
Item Description
peer ip address

Indicates IP address of the peer.

peer id

Indicates the remote ID of IKE peer.

IKE Peer

Indicates name of the IKE peer.

exchange mode

Indicates negotiation mode.

local certificate file name

Indicates certificate file name.

local id type

Indicates ID type: Name, dn, user-fqdn, or IP mode.

authentic ip address

Indicates authentication IP address.

sa binding vpn

Indicates VPN instance bound with the SA.

nat traversal

Indicates state of NAT traversal:

  • enable.
  • disable.
SM4 version

Indicates the SM4 algorithm version:

  • draft-standard.
  • standard.
pki whitelist

Indicates whether PKI whitelist is enabled.

pre-shared-key

Indicates authentication key.

proposal

Indicates IKE proposal.

vpn

Indicates name of the VPN instance.

version

Indicates IKE version.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >