user@ipsec-gw1:~$ sudo ip xfrm state src 203.0.113.10 dst 203.0.113.11 proto esp spi 0xc3bf9516 reqid 1 mode tunnel replay-window 32 flag af-unspec auth-trunc hmac(sha256) 0xd90192ef5431bc592749d9e684dd911ce3a2a81e7b1b56189cdf990f2968dd92 128 enc cbc(aes) 0x5404432c191c77832f0401df3758982326a0fc68d8e3a5440d341a5547d3bb87 src 203.0.113.11 dst 203.0.113.10 proto esp spi 0xc6d753b2 reqid 1 mode tunnel replay-window 32 flag af-unspec auth-trunc hmac(sha256) 0x10253bfb59cf50dc796c08b9650270426994ccc6e8b02136b6bc3baf9d9ea9e5 128 enc cbc(aes) 0xc98e4e1fcc5ee1a5e48b94e6ce11ff033f798c9b311f54a0d587bee9ff6bf92d user@ipsec-gw1:~$