In IPSEC there is concept called SPD(security policy database) and SAD(SA database). What is the difference between them? what command can I use to see the output for them? Thanks
SPD contains entries, each of which defines a subset of IP traffic and points to an SA for that traffic. In more complex environments, there may be multiple entries that potentially relate to a single SA or multiple SAs associated with a single SPD entry.
For more information on the topic kindly follow the url,