On Linux Kernel 2.6.x you can get the policy and status of IPsec also using “ip”:
# ip xfrm policy ... # ip xfrm state ...