Allied Telesis AT-8900, RAPIER I Show ipsec, VPNs Maximum Current Peak, Parameter Meaning VPNs

Models: AT-9900 AT-8700XL AT-9800 AT-8600 RAPIER I AT-8800 AT-8900 X900-48FE

1 232
Download 232 pages 5.78 Kb
Page 178
Image 178

178

Enhancements to IPsec/VPN

 

Release Note

 

 

 

 

 

 

 

Parameter

Description

 

 

 

 

 

 

 

RETRYIKEattempts

The number of consecutive attempts ISAKMP makes to establish a

 

 

 

connection. This parameter should only be used for permanent VPNs.

 

 

 

If an ISAKMP exchange fails, then ISAKMP will attempt the key

 

 

 

exchange again. If a phase 2 exchange fails, the exchange is

 

 

 

attempted over new ISAKMP SAs.

 

 

 

Default: 0

 

 

 

 

 

 

 

 

 

0

No retry attempts occur.

 

 

 

 

 

 

 

 

1..16

The specified number of retry attempts occur.

 

 

 

 

 

 

 

 

CONTinuous

Retry attempts occur continuously until either the

 

 

 

 

connection is established, or 24 hours has passed.

 

 

 

 

After the first 16 attempts, a five minute delay

 

 

 

 

occurs between attempts.

 

 

 

 

 

show ipsec

SHow IPSec

Figure 55: Example output from the show ipsec command

IPSEC Module Configuration

 

Module Status

ENABLED

IPsec over UDP

 

Status

OPEN

Listen Port

2746

VPNs

 

Maximum

1

Current

0

Peak

0

 

 

Table 46: New parameters in output of the show ipsec command

Parameter

Meaning

 

 

VPNs

Information about Virtual Private Network (VPN) tunnels.

 

 

Maximum

The maximum number of concurrent VPN tunnels permitted. Displays

 

only if VPN tunnels on your router or switch are limited by licencing.

 

You can increase this number with a special feature licence—contact

 

your authorised distributor or reseller.

 

 

Current

The number of VPN tunnels currently active.

 

 

Peak

The highest number of VPN tunnels active at any one time since the

 

router or switch started.

 

 

Software Version 2.8.1 C613-10477-00 REV B

Page 178
Image 178
Allied Telesis AT-8900, RAPIER I, X900-48FE, AT-8700XL, AT-9900 Show ipsec, VPNs Maximum Current Peak, Parameter Meaning VPNs