show vpn ipsec dataplane sa

Ze command

Registry path

show vpn ipsec dataplane sa

Usage

show vpn ipsec dataplane sa [spi <spi>]

Mode

Read-only

Wire method

ze-show:vpn-ipsec-dataplane-sa

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Lists each installed ESP SA with its SPI,
addresses, mode, algorithms, replay window, byte and packet counters, and
timestamps. Give 'spi <spi>' to show one SA. Without a selector the command
dumps every SA, which on a device with many tunnels is one row per SA.

Arguments