show vpn ipsec sa

Ze command

Registry path

show vpn ipsec sa

Usage

show vpn ipsec sa

Mode

Read-only

Wire method

ze-show:vpn-ipsec-sa

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Lists every SA with peer, negotiated algorithms,
byte counts, rekey timers, and uptime. Includes SPIs, NAT detection, and child
SA traffic selectors. It is the main IPsec status command.

Arguments

No command-specific arguments listed.