Displaying TCP/IP configuration

To display whether the TCP/IP stack is configured with IPCONFIG IPSECURITY, issue the netstat -f command and look for the following field in the IPv4 Configuration Table section:

IpSecurity: Yes

To display whether the TCP/IP stack is configured with IPCONFIG6 IPSECURITY, issue the netstat -f command and look for the following field in the IPv6 Configuration Table section:

IpSecurity: Yes

To display whether the TCP/IP stack is configured for Sysplex-Wide Security Associations, issue the ipsec -f display command. The DVIPSec field in the header of the command display shows whether or not the DVIPSEC keyword has been coded in the TCP/IP profile:

ipsec -f display | head -n 7

CS V1R12 ipsec  Stack Name: TCPCS  Tue Feb 16 10:52:03 2010
Primary:  Filter          Function: Display            Format:   Detail
Source:   Stack Policy    Scope:    Current            TotAvail: 137
Logging:  On              Predecap: Off                DVIPSec:  Yes
NatKeepAlive:  20         FIPS140:  No
Defensive Mode: Inactive