ipsec -m display

The ipsec -m display command displays information about manual tunnels installed in the stack. Use the -p option to direct the command to a stack other than the default stack or the -z option to direct the command to an NSS IPSec client. Manual tunnels can be either active or inactive. A manual tunnel must be active before traffic matching a filter rule that uses the manual tunnel can be permitted.

Manual tunnels that are not allowed to be used due to time conditions do not appear in the output of ipsec -m display command. Use the pasearch command to obtain information about such manual tunnels.