IPsec Policy¶

All IPsec Policies activated in the Linux kernel can be listed with the command

ip xfrm policy

Example Listing¶

src 10.10.0.0/23 dst 152.96.52.150/32 
        dir in priority 2770 
        tmpl    src 77.57.59.3 dst 152.96.52.150
                proto esp reqid 537 mode tunnel
src 152.96.52.150/32 dst 10.10.0.0/23 
        dir out priority 2680 
        tmpl    src 152.96.52.150 dst 77.57.59.3
                proto esp reqid 537 mode tunnel
src 10.10.0.0/23 dst 152.96.52.150/32 
        dir fwd priority 2770 
        tmpl    src 77.57.59.3 dst 152.96.52.150
                proto esp reqid 537 mode tunnel