Show isakmp counters, Software Version 181

Software Version 2.8.1

181 show isakmp counters

Syntax SHow ISAkmp COUnters[={AGGressiveGENeralHEArtbeatINFo IPSecMAInNETworkQUIckSADSPDTRAnsactionXDB}]

Figure 58: Example output from the show isakmp counter=general command

ISAKMP General Counters
acquire	0
acquireNoPolicy	0	acquireNoSa	0
acquireEquivFound	0	acqPh2EquivInProgress	0
acqPh1XcgStartFailed	0	acqPh2XcgStartFailed	0
acquireQueued	0	acqPeerAddrNameIncons	0
acquirePrenegNoPolicy	0
badSpiRequests	0	badSpiFromKnownPeer	0
badSpiInAggrMode	0	badSpiSendNotifyUnset	0
msgInitPh1p5StartFail	0
doneGood	0	donePhase1Failed	0
doneSendConNoSa	0
msgTx	0	msgTxd	0
txEncryptNoExchange	0	msgTxEncryptNoEncoPrc	0
msgTxStartEncrypt	0
txEncryptFail	0	txEncryptGood	0
msgTxEncryptExpKBytes	0
txRetryTxd	0	txRetryXchgTimedOut	0
retryIkeAttemptsPh1	0	retryIkeAttemptsPh2	0
.

Software Version 2.8.1 C613-10477-00 REV B

Page 181

Image 181

Allied Telesis AT-8600, RAPIER I manual Show isakmp counters, Software Version 181, RetryIkeAttemptsPh1 RetryIkeAttemptsPh2

Contents

Release Note Software Version Release Note Software Version Introduction IntroductionProduct series Models Upgrading to Software Version Backwards Compatibility Issue when UpgradingProduct name Release file GUI resource file CLI help file Overview of New Features Overview of New FeaturesQuickly AT-8600 AT-9800 AT-8900 X900-48FE AT-9900 Software Version AR400 AR7x5 AR750S Rapier AT-8800 Snmp MIBs Restart Log AR400 AR7x5 AR750S Rapier AT-8800 System Enhancements Command ChangesClearing System Parameters Extended Monitoring of CPU Utilisation Enable cpu extended Disable cpu extendedReset cpu utilisation Activate cpu extended Disable cpu extended Command Reference UpdatesEnable cpu extended Activate cpu extended Set system contact Reset cpu utilisationSet system location Set system name Show cpu Example output from the show cpu extended command Parameter Meaning Parts of a Command Command Line Interface CLI EnhancementsMore flexibility in Separating Parameters and Values Command Show command history Additional Shortcuts when EditingCreate config Command Line Interface CLI Enhancements Create configParameter Description Set command assignmentoperator Example output from the show command history command Show command history Add file File System Enhancement File System Enhancement Create file File size Default 204 800 bytes Reset file permanentredirectShow file permanentredirect Software Version Parameter Description File System Enhancement Release Note Example output from the show file permanentredirect command Ordering Hardware Filters in 48-Port Switches Switching Enhancements CommandChange Switching EnhancementsSet switch hwfilter mode New command Show switch hwfilter New mode parameter in output Limiting Rapid MAC Movement PortDisable Enable switch port vlan Create switch trunkSet switch port Set switch thrashlimit Set switch hwrouteupdate Route Update Queue LengthNew command Securing a Single Vlan through Switch Filters Removing a Description from a Switch PortChanged description parameter Configuring vlansecure Ethernet Protection Switching Ring Epsr Change of Debug Command SyntaxShow switch debug New DEV option in output Create switch trunk Disable switch filter vlansecure Disable switch debugDisable switch port vlan Debugging occurs on operations related to the switch chip Enable switch filter vlansecure Enable switch debugEnable switch port vlan Set lacp Set switch hwrouteupdate Set switch hwfilter mode Set switch port Set switch trunk Set switch thrashlimit Address learn thrash action ..... Learn Disable Example output from the show lacp commandAddress learn thrash timeout ... second Show lacp Show switch Switching Enhancements Whether the debugging option for the router or switch is Show switch debugARL, DMA, DEV, PHY, or None Show switch hwfilter Show switch filterNew parameter in output of the show switch filter command VlanSecure New parameters in output of the show switch port command Show switch portMeaning Mode Thrashaction is set to none Add ppp acservice PPPoE Access Concentrator Set ppp acservice Delete ppp acservicePPPoE Access Concentrator Show ppp pppoe New parameter in output of the show ppp pppoe commandEth0 Interface Enable mstp port Disable mstp portDisable mstp port Enable mstp port Show stp port STP EnhancementShow stp port New Port field in output Making Asynchronous Ports Respond More Quickly Asynchronous Port EnhancementSet asyn Show asyn Show asyn Set asyn Ten timer value Ten timer value 100Asynchronous Port Enhancement Release Note Which characters are bundled Internet Group Management Protocol Igmp Enhancements Igmp Proxy on x900 Series Switches Downstream interfaces have members GroupMulticast group Downstream interface Add ip interface Igmp filtering extended to all Igmp message typesSet ip interface Set ip igmp interface Add igmp filter Internet Group Management Protocol Igmp EnhancementsSet igmp filter Show igmp filter Monitoring reception of Igmp general query messages MSGType=QUEryREPortLEAVe Add igmp filter Set igmp filter Add ip interface Set ip igmp interface Set ip interface Leaves Is attached to Recd Show igmp filterPassed Attached to New parameters in the output of the show ip igmp command Upstream General Query Reception Timeout .... NoneShow ip igmp An Snmp trap are generated Internet Protocol IP Enhancements Expanded IP TroubleshootingExpanded number of Eth interfaces per physical interface IP Route Preference Options Assigning the Filter Type IPv4 Filter Expansion Waiting for a Response to an ARP Request Enhancements to Display of UDP Connections over IPv4 New Arp wait timeout field Set ip arpwaittimeoutAdding Static ARP Entries with Multicast MAC Addresses Show ip Enable ip macdisparity Disable ip macdisparityNew IP/MAC address disparity parameter Syntax Traffic filter Add ip filter Disable ip macdisparity Reset ip counter Enable ip macdisparitySet ip arpwaittimeout Set ip route preference Set ip filter Modified parameters on output of the show ip command Arp wait timeout SecsWith multicast MAC addresses. One of Enabled or Show ip Internet Protocol IP Enhancements Release Note Show ip cache Show ip counter When the entry is usedCount Number of times the entry was found Show ip udp Show ip filter Time synchronisation using the Network Time Protocol UDP on the router or switchGeneration/reception of logs using the Secure Router Log Generation/reception of logs using the Net Manage protocol IPv6 Enhancements Show ipv6 udp New commandDisplay of UDP Connections over IPv6 IPv6 Tunnel Expansion Show ipv6 udp L2TP Enhancements L2TP Enhancements Handling PPP Link Negotiation Failures Resetting General L2TP CountersProxyauth=offon Add l2tp ip Disable l2tp debug Enable l2tp debug Reset l2tp counter Show l2tp ip Proxy AuthenticationShow l2tp tunnel Decode Syntax SHow L2TP TUNnel CALL=1..65535 Show l2tp tunnel call Open Shortest Path First Enhancements Ospf Interface PasswordNssa Translator Role Add ospf interface Set ospf area Add ospf areaShow ospf area Interaction with global Ospf parameters Redistributing External Routes Ospf backward compatibility Enable ospf debug Disable ospf debugAdd ospf redistribute Delete ospf redistribute NSSAStability=1..3600 NSSATranslator=CANdidateALWays Add ospf area Add ospf redistribute Add ospf interface Enable ospf debug Disable ospf debugDelete ospf redistribute BGPImport=ONOFFTrueFalseYESNO Set ospf Set ospf interface Set ospf area Set ospf redistribute Role Show ospf areaStability Interval State Software Version 101 Show ospf redistribute BGP Backoff Lower Threshold BGP EnhancementsUpper and Lower Thresholds BGP Enhancements BGP Peer and Peer Template Enhancements Enable and Disable Backoff Displaying the Number of Routes from a Peer Displaying Routes Learned from a Specific BGP PeerDisplaying Information about Routes from a Peer Software Version 105 Add bgp peer Add bgp peertemplate Disable bgp backoff Set bgp backoff Enable bgp backoffSoftware Version 107 BACkoff Set bgp peer Software Version 109 Set bgp peertemplate BGP Enhancements Release Note Show bgp backoffMem Upper Threshold Value 95% Mem Upper Notify Mem Lower Threshold Value 90% Mem Lower Notify Show bgp route Show bgp peerRoutes learned MLD Packet Formats MLD and MLD Snooping EnhancementsIcmp type for MLDv2 Reports MLD and MLD Snooping Enhancements Change of Maximum Query Response Interval for MLD Snooping Group Membership DisplaySoftware Version 113 Show mldsnooping More consistent output Set ipv6 mld Enable ipv6 mld interface Show mldsnooping Show ipv6 mldSoftware Version 115 V2 Draft Compatible MLD and MLD Snooping EnhancementsRelease Note Previous example output from the show mldsnooping command Create classifier Extension to Range of Classifier fields for x900 SwitchesSet classifier Show classifier Create classifier Extension to Range of Classifier fields for x900 Switches Software Version 119 Set classifier Software Version 121 Show classifier Icmp code TCP FlagsIcmp type Igmp type 0x17 V2LEAVE Vlan1234 Classifier Rules 2222 MAC Address Aa-bb-cc-dd-ee-ff TypeFormat Protocol 1234567890 Layer 3 Byte Offset Value Mask Parameter option in brackets if available Igmp TypeTCP Flags One of URG, ACK, RST, SYN, or FIN Port Groups QoS EnhancementsSoftware Version 125 Storm protection Create qos trafficclass Set qos policySet qos trafficclass Show qos trafficclass Create qos policy Add qos portgroup port With the enable switch port command Default portdisable Create qos portgroup Protection is enabledCreate qos trafficclass Storm protection is inactive With the enable switch port command, or Is matching STORMTimeoutEnable switch port vlan command STORMRate Delete qos portgroup port POrt Port to delete from this port group Default no defaultDestroy qos portgroup Specific port that consists Set qos policy Reset qos portgroup countersSoftware Version 133 Uses Kbps. If you specify Mbps or Gbps, the rate Set qos portgroup Software Version 135 Parameter Description Set qos trafficclass Is disabled by storm protection With the enable switch port or enable switchShow qos policy QoS Enhancements Release Note Parameter Description Show qos port Rate 1kbps Window 100ms Timeout NonePorts Assigned to Port Groups Assigned to 213-24 Storm Protection Status QoS EnhancementsRelease Note Show qos portgroupPort Group Trunk Group None Show qos portgroup counters Parameters in output of the show qos portgroup commandSoftware Version 139 Integer from 1 to 140 Number of bytes that conforms with band with class Show qos trafficclassStorm Protection Configuring the Server Configuring Secure CopyConfiguring the Client Secure Copy SCP Use the show ssh session command to see current sessions Configuring UsersManaging Secure Copy Sessions Software Version 143 Loading Files to the Switch Loading using Secure Copy Uploading from the Switch Uploading using Secure CopyLoading Files from a Remote Machine Software Version 145 Load Uploading Files from a Remote MachineSet loader Show loader Disable ssh server Disable ssh debugDelete ssh session Software Version 147 Enable ssh server Enable ssh debugWhether the SSH server supports SCP connections Software Version 149 Load Default tftp Copy is the default method for loading and uploadingSet loader Software Version 151 Set ssh client Show loader Set ssh server192.168.1.1 Alice Show ssh SSH Server Enabled SCP ServiceSoftware Version 153 Debug Show ssh counter Reset loader command Software Version 155 Show ssh sessionParameter Meaning WriteFileFailed Failure Parameter Meaning Secure Shell Session Secure Copy SCP Release Note Software Version 157 UploadCharacters long Show ssl counters SSL Counter EnhancementSSL Counter Enhancement Show ssl counters BadSessionIdLen Software Version 159Session ID longer than 32 bytes Client Counters for the SSL client BadSessionIdLen Firewall Licencing Firewall EnhancementsDisabling SIP ALG Call ID Translation Firewall Enhancements Displaying SIP ALG Session Details Set firewall sipalg New commandFirewall Policy Rules Expansion Software Version 161 Displaying a Subset of Policy Rules Reset firewall sipalg counterSet firewall sipalg Show firewall policy Show firewall policy Show firewall Ip or callid commands Valid with the ip or summary commandsShow firewall sipalg CALLId Service Parameters in output of the show firewall sipalg commandWithin the private network protected by the firewall Active SIP Sessions Firewall Enhancements Release Note Router or switch. The router or switch only translates IPGbl IP Seen on the public side of the firewall Since start up or reset Past sessions Start up or reset Current sessions Audio sessions createdShow firewall sipalg counter Current SIP sessions Them Total number of SIP messages received that the SIP ALG Responding to IPsec Packets from an Unknown Tunnel Enhancements to IPsec/VPNSoftware Version 169 Modifying the Message Retransmission Delay Retrying Isakmp Phase 1 and 2 Negotiations New retryikeattempts parameter VPN Tunnel LicencingNew retryIkeAttemptsPh1 and retryIkeAttemptsPh2 New usePolIkeRetryGood and usePolIkeRetryFailed Software Version 173 Create ipsec policy Msgtimeout value Default incrementalCreate isakmp policy Msgbackoff parameter RETRYIKEattempts After the first 16 attempts, a five minute delayAttempted over new Isakmp SAs Occurs between attempts Set ipsec policy Software Version 177 Set isakmp policy VPNs Maximum Current Peak Show ipsecParameter Meaning VPNs Software Version 179 Show ipsec policyRespond Bad SPI Respond Bad SPI InBadSpiResponse Show ipsec policy counterInBadSpiResponse To true and packets processed by that policy have an Software Version 181 Show isakmp countersRetryIkeAttemptsPh1 RetryIkeAttemptsPh2 UsePolIkeRetryGood UsePolIkeRetryFailed Software Version 183 Show isakmp exchangeMessage Back-off Incremental Same None Show isakmp policy Iskamp policy command Software Version 185 Show isakmp saMessage Back-off None Shdsl Line MIB Snmp MIBsSnmp MIBs Snmp request not processed due to excessive memory Logging Snmp operationUsage Snmp Trap not sent due to excessive memory usage Traps on Ospf state changes Traps on Mstp state and topology changes Trap on Vrrp topology changesSoftware Version 189 Restart Log Trap on Login FailuresVLAN-based port state changes Software Version 191 Trap on Memory LevelsShow buffer New Buffer level 0 field Show buffer New parameters in output of the show buffer commandBuffer level 1500 Parameter Meaning Buffer level n CDP over WAN Interfaces Disable lldp cdp ppptemplate Disable lldp cdp interfaceEnable lldp cdp debug CDP over WAN Interfaces Enable lldp cdp ppptemplate Enable lldp cdp interfaceEnables debugging of PPP events Software Version 195 Show lldp cdp PPP Templates Enabled PPP Templates DisabledShow lldp cdp interface Ppp0 Ppp1 Software Version 197 Permanent Assignments on AR400 Series RoutersPage Chapter Introduction to Ethernet Protection Switching Ring Epsr Epsr Instances and Domains Introduction to Ethernet Protection Switching Ring Epsr Control Vlan Ethernet Protection Switching Ring EpsrData Vlan Master Node Master Node Polling Fault Detection Fault Detection and RecoveryTransit Node Unsolicited Fault Detection Fault Recovery Procedure Restoring Normal Operation Epsr Single Domain, Single Ring Network Configuring Epsr # For Transit Nodes 1, 2 Example script for a 4 node ring network Single Ring, Dual Domain Network # Node 1 Master node for RingA Transit Node for RingB Example script for a Single Ring, Two Domain Network Node Example script for a Single Ring, Two Domain Network Nodes 2 # Node 3 Transit node for RingA Master Node for RingB Epsr and Spanning Tree Operation # For Transit Node # For Transit Nodes 2 Command Reference Add epsr datavlan Add epsr datavlan Create epsr Ethernet Protection Switching Ring Epsr Create epsr Seconds 32767s. Only configured for the master node Only configured for the master nodeDefault 1s FAilovertime Default 2s RIngflaptime Hyphen character -. The epsr-name cannot be ALL Delete epsr datavlanUnique name for the VLAN. This can be from 1 to Vlan-name cannot be a number or ALL Destroy epsr Destroy epsr Ethernet Protection Switching Ring Epsr Disable epsr Disable epsrEpsr instance to be disabled String, 1 to 15 characters long. Valid characters are Disable epsr debug Disable epsr debug Ethernet Protection Switching Ring Epsr Enable epsr Enable epsrEpsr instance to be enabled Enable epsr debug Enable epsr debugEpsr instance whose debugging is to be enabled OUTput Purge epsr Ethernet Protection Switching Ring Epsr Purge epsr Set epsr Set epsr Set epsr port Ethernet Protection Switching Ring Epsr Set epsr portEpsr to be set for the port VLANs within the ring domain Show epsr Show epsrEpsr instance whose details are displayed Ethernet Protection Switching Ring Epsr Show epsr Second Port Disabled. This parameter is only shown for a transit nodeShown for a transit node Second Port Status Show epsr counter Ethernet Protection Switching Ring Epsr Show epsr counterCOUnter Epsr instances Related Commands show epsr Show epsr debug Show epsr debug

Allied Telesis AT-8600, RAPIER I, X900-48FE, AT-8900 Show isakmp counters, Software Version 181

Models: AT-9900 AT-8700XL AT-9800 AT-8600 RAPIER I AT-8800 AT-8900 X900-48FE

Software Version 2.8.1

181

show isakmp counters

Figure 58: Example output from the show isakmp counter=general command

retryIkeAttemptsPh1

retryIkeAttemptsPh2