Skip to main content
Version: current

active-peers


ip/ipsec/active-peers

Type: Directory

This menu provides various statistics about remote peers that currently have established a phase 1 connection.

FlagNameDescription
RresponderWhether the peer is a responder.
Nnatt-peerWhether NAT traversal is used for the peer.
PppkWhether post-quantum preshared key is used.
Read-only ArgumentTypeDescription
idstringPeer identifier.
local-addressalt { ipv6: ip6Addr , ip: ipAddr }Local IP address.
portnumRemote port.
remote-addressalt { ipv6: ip6Addr , ip: ipAddr }Remote IP address.
stateenum (spawning | starting | message-1-received | message-1-sent | message-2-received | message-2-sent | message-3-received | message-3-sent | message-4-received | established | expired | no-phase1 | eap | crypto | qkd) { spawning:0, starting:1, message-1-received:2, message-1-sent:3, message-2-received:4, message-2-sent:5, message-3-received:6, message-3-sent:7, message-4-received:8, established:9, expired:10, no-phase1:11 }Current IKE phase 1 state.
sideenum (initiator | responder)Whether the peer acts as a responder.
dynamic-addressalt { ip: ipAddr }Dynamically assigned address.
uptimetimeConnection uptime.
last-seentimeTime since the last received packet.
ph2-totalnumTotal number of phase 2 exchanges.
spiistringInitiator SPI value.
spirstringResponder SPI value.
rx-packetsnumNumber of received packets.
rx-bytesnumNumber of received bytes.
tx-packetsnumNumber of transmitted packets.
tx-bytesnumNumber of transmitted bytes.