Show vpn-sessiondb l2l - explained in details?

[eagopyan]

On the output from a show vpn-sess l2l what does the “(5)” and the (1) mean:

Encryption   : IKEv1: (1)AES256  IPsec: (5)AES256

Hashing      : IKEv1: (1)SHA1  IPsec: (5)SHA1

[Karsten Iwen · Accepted solution]

This shows how many SAs you have with that peer. When you use this command with the "detail" option, you see (1) IKE SA and (5) IPsec SAs. The later are actually pairs of SAs as they are unidirectional.

[eagopyan]

Thank you Karsten!