Retrieve an IPsec policy
GET /security/ipsec/policies/{uuid}
Introduced In: 9.8
Retrieves a specific IPsec policy.
Related ONTAP commands
- 
security ipsec policy show 
Parameters
| Name | Type | In | Required | Description | 
|---|---|---|---|---|
uuid  | 
string  | 
path  | 
True  | 
IPsec policy UUID  | 
fields  | 
array[string]  | 
query  | 
False  | 
Specify the fields to return.  | 
Response
Status: 200, Ok
| Name | Type | Description | 
|---|---|---|
authentication_method  | 
string  | 
Authentication method for the IPsec policy.  | 
certificate  | 
Certificate for the IPsec policy.  | 
|
enabled  | 
boolean  | 
Indicates whether or not the policy is enabled.  | 
ipspace  | 
Applies to both SVM and cluster-scoped objects. Either the UUID or name may be supplied on input.  | 
|
local_endpoint  | 
Local endpoint for the IPsec policy.  | 
|
local_identity  | 
string  | 
Local Identity  | 
name  | 
string  | 
IPsec policy name.  | 
protocol  | 
string  | 
Lower layer protocol to be covered by the IPsec policy.  | 
remote_endpoint  | 
Remote endpoint for the IPsec policy.  | 
|
remote_identity  | 
string  | 
Remote Identity  | 
scope  | 
string  | 
Set to "svm" for interfaces owned by an SVM. Otherwise, set to "cluster".  | 
svm  | 
||
uuid  | 
string  | 
Unique identifier of the IPsec policy.  | 
Example response
{
  "authentication_method": "string",
  "certificate": {
    "_links": {
      "self": {
        "href": "/api/resourcelink"
      }
    },
    "name": "cert1",
    "uuid": "1cd8a442-86d1-11e0-ae1c-123478563412"
  },
  "ipspace": {
    "_links": {
      "self": {
        "href": "/api/resourcelink"
      }
    },
    "name": "exchange",
    "uuid": "1cd8a442-86d1-11e0-ae1c-123478563412"
  },
  "local_endpoint": {
    "address": "10.10.10.7",
    "family": "string",
    "netmask": "24",
    "port": "23"
  },
  "local_identity": "string",
  "name": "string",
  "protocol": "17",
  "remote_endpoint": {
    "address": "10.10.10.7",
    "family": "string",
    "netmask": "24",
    "port": "23"
  },
  "remote_identity": "string",
  "scope": "string",
  "svm": {
    "_links": {
      "self": {
        "href": "/api/resourcelink"
      }
    },
    "name": "svm1",
    "uuid": "02c9e252-41be-11e9-81d5-00a0986138f7"
  },
  "uuid": "1cd8a442-86d1-11e0-ae1c-123478563412"
}
Error
Status: Default
ONTAP Error Response Codes
| Error Code | Description | 
|---|---|
66257116  | 
IPsec policy with the specified UUID was not found.  | 
| Name | Type | Description | 
|---|---|---|
error  | 
Example error
{
  "error": {
    "arguments": [
      {
        "code": "string",
        "message": "string"
      }
    ],
    "code": "4",
    "message": "entry doesn't exist",
    "target": "uuid"
  }
}
Definitions
See Definitions
href
| Name | Type | Description | 
|---|---|---|
href  | 
string  | 
_links
| Name | Type | Description | 
|---|---|---|
self  | 
certificate
Certificate for the IPsec policy.
| Name | Type | Description | 
|---|---|---|
_links  | 
||
name  | 
string  | 
Certificate name  | 
uuid  | 
string  | 
Certificate UUID  | 
ipspace
Applies to both SVM and cluster-scoped objects. Either the UUID or name may be supplied on input.
| Name | Type | Description | 
|---|---|---|
_links  | 
||
name  | 
string  | 
IPspace name  | 
uuid  | 
string  | 
IPspace UUID  | 
local_endpoint
Local endpoint for the IPsec policy.
| Name | Type | Description | 
|---|---|---|
address  | 
string  | 
IPv4 or IPv6 address  | 
family  | 
string  | 
IPv4 or IPv6  | 
netmask  | 
string  | 
Input as netmask length (16) or IPv4 mask (255.255.0.0). For IPv6, the default value is 64 with a valid range of 1 to 127. Output is always netmask length.  | 
port  | 
string  | 
Application port to be covered by the IPsec policy  | 
remote_endpoint
Remote endpoint for the IPsec policy.
| Name | Type | Description | 
|---|---|---|
address  | 
string  | 
IPv4 or IPv6 address  | 
family  | 
string  | 
IPv4 or IPv6  | 
netmask  | 
string  | 
Input as netmask length (16) or IPv4 mask (255.255.0.0). For IPv6, the default value is 64 with a valid range of 1 to 127. Output is always netmask length.  | 
port  | 
string  | 
Application port to be covered by the IPsec policy  | 
svm
| Name | Type | Description | 
|---|---|---|
_links  | 
||
name  | 
string  | 
The name of the SVM.  | 
uuid  | 
string  | 
The unique identifier of the SVM.  | 
error_arguments
| Name | Type | Description | 
|---|---|---|
code  | 
string  | 
Argument code  | 
message  | 
string  | 
Message argument  | 
error
| Name | Type | Description | 
|---|---|---|
arguments  | 
array[error_arguments]  | 
Message arguments  | 
code  | 
string  | 
Error code  | 
message  | 
string  | 
Error message  | 
target  | 
string  | 
The target parameter that caused the error.  |