Querying IKESAs using SMP¶

Examples¶

Request¶

1<?xml version="1.0"?>
2<message xmlns="http://www.strongswan.org/smp/1.0" type="request" id="1">
3    <query>
4        <!-- request all available IKE_SAs -->
5        <ikesalist/>
6    </query>
7</message>

Response¶

 1<?xml version="1.0"?>
 2<message xmlns="http://www.strongswan.org/smp/1.0" type="response" id="1">
 3    <query>
 4        <ikesalist>
 5            <ikesa>
 6                <!-- uniquely assigned ID for this IKE_SA -->
 7                <id>1</id>
 8                <status>established</status>
 9                <!-- role of local peer (initiator initiated the IKE_SA -->
10                <role>initiator</role>
11                <!-- configuration used to set up this IKE_SA -->
12                <peerconfig>to-moon</peerconfig>
13                <local>
14                    <spi>67f4278420f2bc86</spi>
15                    <identification type="email">alice@strongswan.org</identification>
16                    <address type="ipv4">10.1.0.10</address>
17                    <port>500</port>
18                    <!-- true if peer is behind a NAT router -->
19                    <nat>false</nat>
20                </local>
21                <remote>
22                    <spi>af45d91748bc19e8</spi>
23                    <identification type="fqdn">moon.strongswan.org</identification>
24                    <address type="ipv4">10.1.0.1</address>
25                    <port>500</port>
26                    <nat>false</nat>
27                </remote>
28            </ikesa>
29            <ikesa>
30                <id>2</id>
31                <status>connecting</status>
32                <role>initiator</role>
33                <peerconfig>to-sun</peerconfig>
34                <local>
35                    <spi>67f4278420f2bc86</spi>
36                    <identification type="email">alice@strongswan.org</identification>
37                    <address type="ipv6">::</address>
38                    <port>500</port>
39                    <nat>true</nat>
40                </local>
41                <remote>
42                    <spi>00</spi>
43                    <identification type="fqdn">sun.strongswan.org</identification>
44                    <address type="ipv6">fec0::2</address>
45                    <port>500</port>
46                    <nat>false</nat>
47                </remote>
48            </ikesa>
49        </ikesalist>
50    </query>
51</message>