LON-FW01# sh crypto ipsec sa
interface: WAN1
    Crypto map tag: NSL-IPSEC, seq num: 1, local addr: X.X.Z.Z

      access-list NSL-IPSEC-IKEV1 extended permit ip 10.172.63.0 255.255.255.0 10.200.10.0 255.255.255.0
      local ident (addr/mask/prot/port): (10.172.63.0/255.255.255.0/0/0)
      remote ident (addr/mask/prot/port): (10.200.10.0/255.255.255.0/0/0)
      current_peer: X.X.X.X


      #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
      #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #TFC rcvd: 0, #TFC sent: 0
      #Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
      #send errors: 0, #recv errors: 0

      local crypto endpt.: X.X.Z.Z/0, remote crypto endpt.: X.X.X.X/0
      path mtu 1500, ipsec overhead 74(44), media mtu 1500
      PMTU time remaining (sec): 0, DF policy: copy-df
      ICMP error validation: disabled, TFC packets: disabled
      current outbound spi: 11F924D2
      current inbound spi : 7D3B9E74

    inbound esp sas:
      spi: 0x7D3B9E74 (2101059188)
         SA State: active
         transform: esp-aes-256 esp-sha-hmac no compression
         in use settings ={L2L, Tunnel, IKEv1, }
         slot: 0, conn_id: 3506, crypto-map: NSL-IPSEC
         sa timing: remaining key lifetime (kB/sec): (4374000/1664)
         IV size: 16 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x00000000 0x00000001
    outbound esp sas:
      spi: 0x11F924D2 (301540562)
         SA State: active
         transform: esp-aes-256 esp-sha-hmac no compression
         in use settings ={L2L, Tunnel, IKEv1, }
         slot: 0, conn_id: 3506, crypto-map: NSL-IPSEC
         sa timing: remaining key lifetime (kB/sec): (4374000/1664)
         IV size: 16 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x00000000 0x00000001

    Crypto map tag: NSL-IPSEC, seq num: 1, local addr: X.X.Z.Z

      access-list NSL-IPSEC-IKEV1 extended permit ip 172.16.63.0 255.255.255.0 10.200.10.0 255.255.255.0
      local ident (addr/mask/prot/port): (172.16.63.0/255.255.255.0/0/0)
      remote ident (addr/mask/prot/port): (10.200.10.0/255.255.255.0/0/0)
      current_peer: X.X.X.X


      #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
      #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #TFC rcvd: 0, #TFC sent: 0
      #Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
      #send errors: 0, #recv errors: 0

      local crypto endpt.: X.X.Z.Z/0, remote crypto endpt.: X.X.X.X/0
      path mtu 1500, ipsec overhead 74(44), media mtu 1500
      PMTU time remaining (sec): 0, DF policy: copy-df
      ICMP error validation: disabled, TFC packets: disabled
      current outbound spi: AEA261EF
      current inbound spi : 18306284

    inbound esp sas:
      spi: 0x18306284 (405824132)
         SA State: active
         transform: esp-aes-256 esp-sha-hmac no compression
         in use settings ={L2L, Tunnel, IKEv1, }
         slot: 0, conn_id: 3506, crypto-map: NSL-IPSEC
         sa timing: remaining key lifetime (kB/sec): (4374000/1696)
         IV size: 16 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x00000000 0x00000001
    outbound esp sas:
      spi: 0xAEA261EF (2929877487)
         SA State: active
         transform: esp-aes-256 esp-sha-hmac no compression
         in use settings ={L2L, Tunnel, IKEv1, }
         slot: 0, conn_id: 3506, crypto-map: NSL-IPSEC
         sa timing: remaining key lifetime (kB/sec): (4374000/1696)
         IV size: 16 bytes
         replay detection support: Y
         Anti replay bitmap:
          0x00000000 0x00000001