command for ip xfrm state

[mercy_angel]

i am using mikrotik tunnel with pfsense router, and find some in-state-sequence-errors value on the mikrotik, and i now want to compare,So whenever this counter increases, there is at least one "miskeyed" SA.
This is command for mikrotik

/ip ipsec installed-sa print

, but i need it for pfsense, i tried something like this

ip xfrm state

but command not found..

[Konstanti]

@mercy_angel
ipsec statusall
or
swanctl --list-sas
or
setkey -D

ip xfrm state - it's a Linux command

[mercy_angel]

@konstanti said in command for ip xfrm state:

ipsec statusall
or
swanctl --list-sas
or
setkey -D

Thanks a lot!