19.4. Additional informations:

On Linux Kernel 2.6.x you can get the policy and status of IPsec also using "ip":

# ip xfrm policy
...

# ip xfrm state
...