At the moment, my router has three active IPsec-tunnels. The three corresponding SAs can be showed by show vpn ike sa. That works fine.
But it is not possible to show only one selected peer:
manuel@mvr02:~$ show vpn ike sa peer 193.122.xx.xx Peer ID / IP Local ID / IP ------------ ------------- 193.122.xx.xx 193.122.xx.xx 87.106.xxx.xxx 87.106.xxx.xxx State IKEVer Encrypt Hash D-H Group NAT-T A-Time L-Time ----- ------ ------- ---- --------- ----- ------ ------ up IKEv2 AES_CBC_256 HMAC_SHA2_384_192 MODP_1536 no 526 25730 Peer ID / IP Local ID / IP ------------ ------------- 109.250.168.xxx fw1int 87.106.xxx.xxx mvr02 State IKEVer Encrypt Hash D-H Group NAT-T A-Time L-Time ----- ------ ------- ---- --------- ----- ------ ------ up IKEv2 AES_CBC_256 HMAC_SHA2_256_128 MODP_2048 no 7311 21321 Peer ID / IP Local ID / IP ------------ ------------- 93.90.203.xx 93.90.203.xx 87.106.xxx.xxx 87.106.xxx.xxx State IKEVer Encrypt Hash D-H Group NAT-T A-Time L-Time ----- ------ ------- ---- --------- ----- ------ ------ up IKEv2 AES_CBC_256 HMAC_SHA2_384_192 MODP_1536 no 20404 5714 manuel@mvr02:~$
I've tried some different variants as peer (ipv4-address, name of peer in vyos-config, peer-id as used in IKE), but always all peers are shown.