Use the -x primary option to display information about NSS IPSec clients that are currently connected to the NSS server.
See The z/OS UNIX ipsec command network security server (-x) option for parameter descriptions.