installed-sa
ip/ipsec/installed-sa
Type: Directory
This menu provides information about installed security associations including the keys.
| Flag | Name | Description |
|---|---|---|
| S | seen-traffic | Whether traffic has passed through the SA. |
| H | hw-aead | Whether hardware AEAD acceleration is used. |
| A | AH | Whether the SA uses AH protocol. |
| E | ESP | Whether the SA uses ESP protocol. |
| Argument | Type | Description |
|---|---|---|
| spi | num | Security Parameter Index value. |
| state | enum (larval | mature | dying | dead) { larval:0, mature:1, dying:2, dead:3 } | Current SA state. |
| auth-algorithm | enum (none | md5 | sha1 | sha256 | sha512) { none:0, md5:2, sha1:3, sha256:5, sha512:7 } | Authentication algorithm. |
| enc-algorithm | enum (none | des | 3des | null | aes-cbc | aes-ctr | aes-gcm | blowfish | twofish | camellia | chacha20poly1305) { none:0, des:2, 3des:3, null:11, aes-cbc:12, aes-ctr:13, aes-gcm:20, blowfish:7, twofish:253, camellia:22, chacha20poly1305:254 } | Encryption algorithm. |
| enc-key-size | num | Encryption key size in bits. |
| auth-key | string | Authentication key value. |
| enc-key | string | Encryption key value. |
| addtime | date | Time when the SA was added. |
| expires-in | time | Time until the SA expires. |
| add-lifetime | composite { soft: time , hard: time } | Added lifetime for the SA in the format soft/hard:
|
| current-bytes | num | Number of bytes processed by the SA. |
| current-packets | num | Number of packets processed by the SA. |
| invalid-packets | num | Number of invalid packets. |
| replay | num | Replay window size. |
| Read-only Argument | Type | Description |
|---|---|---|
| src-address | super { src-address: alt { ipv6: ip6Addr , ip: ipAddr } , [port] :num } | Source address and port. |
| dst-address | super { dst-address: alt { ipv6: ip6Addr , ip: ipAddr } , [port] :num } | Destination address and port. |