show vpn ipsec dataplane policy

Ze command

Registry path

show vpn ipsec dataplane policy

Usage

show vpn ipsec dataplane policy

Mode

Read-only

Wire method

ze-show:vpn-ipsec-dataplane-policy

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Lists each policy with its selector prefixes
and ports, direction, priority, upper-layer protocol, if_id, tunnel endpoints,
and the peer that installed it. A policy with no matching SA is the failure
this command exists to show. RFC 4301 Section 4.4 keeps the SPD and the SAD
separate, and so does this tree.

Arguments

No command-specific arguments listed.