Skip to main content
Command reference

security cluster-network ipsec policy show

Suggest changes
PDFs

Show the IPsec policies for cluster security

Availability: This command is available to cluster administrators at the admin privilege level.

Description

The security cluster-network ipsec policy show command displays the IPsec policies used for the cluster security feature configuration.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all fields.

[-node <nodename>] - Node Name

Node name.

[-name <text>] - Policy Name

The IPsec policy name used by the specified node for the cluster security feature.

[-auth-method <IKE Authentication Method>] - Authentication Method

Authentication method used by the IPsec policy.

[-cert-uuid <UUID>] - UUID for Certificate

UUID of the certificate used for authentication in this policy.

[-local-ip <IP Address/Mask>] - Local IP

Local IP protected by this IPsec policy.

[-remote-ip <IP Address/Mask>] - Remote IP

Remote IP allowed by this IPsec policy.

[-action <IPsec Action Type>] - Action

Action to take for traffic matching this policy (e.g., protect, bypass).

Examples

The following example displays the IPsec policy information for the cluster security feature configuration.

cluster1::> security cluster-network ipsec policy show
Node        Policy Name      Local IP Subnet Remote IP Subnet Certificate UUID
----------- ---------------- --------------- ---------------- ----------------
node1       policy1          10.1.1.0/24     10.2.1.0/24      12345678-1234-...

node2       policy2          10.1.2.0/24     10.2.2.0/24      87654321-4321-...

2 entries were displayed.