show security group-vpn server kek security-associations

Index number of an SA. This number is an internally generated number you can use to display information about a single SA.

Identifier of the remote/peer. Because there could be multiple members, the remote address always contains the IP address 0.0.0.0.

State of the KEK security associations:

• DOWN—SA is not active.

• UP—SA is active.

Random number generated by the server. This is used when the server needs to push data to a member, or a member needs to reply to the server.

Random number generated by the server. This is used when the server needs to push data to a member, or a member needs to reply to the server.

Group identifier.

IP address of the destination peer with which the local peer communicates. For KEK SAs, it always contains 0.0.0.0 which means any IP address.

For the server, it is always initiator.

RSA is the supported authentication method.

Address of the local peer.

Address of the remote peer.

Number of seconds remaining until the IKE SA expires.

Internet Key Exchange (IKE) algorithms used to encrypt and secure exchanges between the peers during the Phase 2 process:

• Sig-hash—Type of authentication algorithm used.

  • sha-256—Secure Hash Algorithm 256 authentication.

  • sha-384—Secure Hash Algorithm 384 authentication.

• Encryption—Type of encryption algorithm used.

  • aes-256-cbc—Advanced Encryption Standard (AES) 256-bit encryption.

  • aes-192-cbc— AES192-bit encryption

  • aes-128-cbc—AES 128-bit encryption.

• Input bytes—Number of bytes received.

• Output bytes—Number of bytes transmitted.

• Input packets—Number of packets received.

• Output packets—Number of packets transmitted.

Identify the latest set of information maintained in the server.

The following fields are the configured server-member-communication options:

Antireplay time in milliseconds. This is 0 if antireplay is disabled.

Number of seconds between a rekey transmission and the first retransmission when there is no reply from the member.

For unicast communications, the number of times the server retransmits rekey messages to a member when there is no reply.

Configured lifetime, in seconds, for the KEK.

Sequence number of the KEK SA groupkey-push message. This number is incremented with every groupkey-push message.