Which command displays current IPsec SA information for active tunnels?

The command that displays current IPsec Security Association (SA) information for active tunnels is "diagnose vpn tunnel list." This command is specifically designed to provide detailed information regarding the established VPN tunnels, including their status and configuration. When executed, it reveals active tunnels, their encryption and integrity settings, and can indicate issues or statuses related to those tunnels.

The focused utility of this command in managing and troubleshooting IPsec tunnels makes it an essential tool for administrators. It helps to ascertain whether the tunnels are up and running as expected, providing vital information that can assist in monitoring and ensuring the reliability of VPN connections.