To display whether the TCP/IP stack is configured with IPCONFIG IPSECURITY, issue the netstat -f command and look for the following field in the IPv4 Configuration Table section:
IpSecurity: Yes
To display whether the TCP/IP stack is configured with IPCONFIG6 IPSECURITY, issue the netstat -f command and look for the following field in the IPv6 Configuration Table section:
IpSecurity: Yes
To display whether the TCP/IP stack is configured for Sysplex-Wide Security Associations, issue the ipsec -f display command. The DVIPSec field in the header of the command display shows whether or not the DVIPSEC keyword has been coded in the TCP/IP profile:
ipsec -f display | head -n 7
CS V1R12 ipsec Stack Name: TCPCS Tue Feb 16 10:52:03 2010
Primary: Filter Function: Display Format: Detail
Source: Stack Policy Scope: Current TotAvail: 137
Logging: On Predecap: Off DVIPSec: Yes
NatKeepAlive: 20 FIPS140: No
Defensive Mode: Inactive