The display ike peer command displays the configuration of IKE peer.
This command is supported only on the NetEngine 8000 F1A.
The output of the display ike peer command provides the following information:
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display ike peer name peer1
---------------------------
IKE Peer: peer1
exchange mode: main on phase 1
pre-shared-key: ******
local certificate file name:
proposal:
local id type: ip
peer ip address: 0.0.0.0 255.255.255.255
vpn:
authentic ip address: 0.0.0.0 255.255.255.255
version: v2
peer id:
sa binding vpn:
nat traversal: disable
SM4 version: standard
pki whitelist: disable
---------------------------
Item | Description |
---|---|
peer ip address | Indicates IP address of the peer. |
peer id | Indicates the remote ID of IKE peer. |
IKE Peer | Indicates name of the IKE peer. |
exchange mode | Indicates negotiation mode. |
local certificate file name | Indicates certificate file name. |
local id type | Indicates ID type: Name, dn, user-fqdn, or IP mode. |
authentic ip address | Indicates authentication IP address. |
sa binding vpn | Indicates VPN instance bound with the SA. |
nat traversal | Indicates state of NAT traversal:
|
SM4 version | Indicates the SM4 algorithm version:
|
pki whitelist | Indicates whether PKI whitelist is enabled. |
pre-shared-key | Indicates authentication key. |
proposal | Indicates IKE proposal. |
vpn | Indicates name of the VPN instance. |
version | Indicates IKE version. |