show crypto ipsec sa ipv6Display the IPsec security associations (SAs) used on OSPFv3 interfaces.E-Series TeraScale, Z-Series, S4810Syntax show crypto ipsec sa ipv6 [interface interface]Parameters interfaceinterface(OPTIONAL) Displays information about the SAs used on a specifiedOSPFv3 interface, whereinterface is one of the following values:• For a 1-Gigabit Ethernet interface, enter GigabitEthernetslot/port.• For a Port Channel interface, enter port-channelnumber.Valid port-channel numbers (on an E-Series TeraScale): 1 to255.• For a 10-Gigabit Ethernet interface, enter TenGigabitEthernetslot/port.• For a 40–Gigabit Ethernet interface, enter fortyGigEslot/port.• For a VLAN interface, enter vlanvlan-id. Valid VLAN IDs: 1 to4094.Defaults No default behavior or values.Command Modes EXECEXEC PrivilegeCommand History Version 9.1.(0.0) Introduced on the S4810 and Z9000.Version 8.4.2.0 Introduced on the E-Series TeraScale.UsageInformationThe show crypto ipsec sa ipv6 command output displays security associations set up forOSPFv3 links in IPsec authentication and encryption policies on the router.RelatedCommands show cryptoipsec policyDisplay the configuration of IPsec authentication and encryptionpolicies.ExampleFTOS#show crypto ipsec policyFTOS#show crypto ipsec sa ipv6Interface: TenGigabitEthernet 0/0Link Local address: fe80::201:e8ff:fe40:4d10IPSecv6 policy name: OSPFv3-1-500inbound ah sasspi : 500 (0x1f4)transform : ah-md5-hmacin use settings : {Transport, }replay detection support : NSTATUS : ACTIVE1123
