Using the ipsec command

You can use the ipsec command to display information about:
  • IP filter rules
  • Security associations
  • Port translation
  • SECCLASS definitions
  • Matching IP filter rules for a specified traffic pattern
  • Network security information of an IKE daemon's active NSS IPSec clients
  • NSS IPSec clients connected to NSS servers

By default, ipsec commands are directed to the local system. Optionally, ipsec commands may be directed to remote systems (NSS IPSec clients) using the ipsec -z option.

Restriction: Management of defensive filters (ipsec -F) is only provided through the local ipsec command. Remote management using an NSS server is not supported.
Parent topic: Tools for diagnosing IP security and defensive filter problems