Manuals / Allied Telesis / Computer Equipment / Network Router

Allied Telesis AT-8600, RAPIER I, X900-48FE, AT-8900 Show isakmp counters, Software Version 181

Models: AT-9900 AT-8700XL AT-9800 AT-8600 RAPIER I AT-8800 AT-8900 X900-48FE

1 232

Download 232 pages 5.78 Kb

Page 181

Image 181

Software Version 2.8.1

181 show isakmp counters

Syntax SHow ISAkmp COUnters[={AGGressiveGENeralHEArtbeatINFo IPSecMAInNETworkQUIckSADSPDTRAnsactionXDB}]

Figure 58: Example output from the show isakmp counter=general command

ISAKMP General Counters
acquire	0
acquireNoPolicy	0	acquireNoSa	0
acquireEquivFound	0	acqPh2EquivInProgress	0
acqPh1XcgStartFailed	0	acqPh2XcgStartFailed	0
acquireQueued	0	acqPeerAddrNameIncons	0
acquirePrenegNoPolicy	0
badSpiRequests	0	badSpiFromKnownPeer	0
badSpiInAggrMode	0	badSpiSendNotifyUnset	0
msgInitPh1p5StartFail	0
doneGood	0	donePhase1Failed	0
doneSendConNoSa	0
msgTx	0	msgTxd	0
txEncryptNoExchange	0	msgTxEncryptNoEncoPrc	0
msgTxStartEncrypt	0
txEncryptFail	0	txEncryptGood	0
msgTxEncryptExpKBytes	0
txRetryTxd	0	txRetryXchgTimedOut	0
retryIkeAttemptsPh1	0	retryIkeAttemptsPh2	0
.

Software Version 2.8.1 C613-10477-00 REV B

Page 181

Image 181

Allied Telesis AT-8600, RAPIER I manual Show isakmp counters, Software Version 181, RetryIkeAttemptsPh1 RetryIkeAttemptsPh2

Contents

Release Note Software VersionRelease Note Software Version Introduction IntroductionProduct series Models Upgrading to Software Version Backwards Compatibility Issue when UpgradingProduct name Release file GUI resource file CLI help file Overview of New Features Overview of New FeaturesQuickly AT-8600 AT-9800 AT-8900 X900-48FE AT-9900 Software Version AR400 AR7x5 AR750S Rapier AT-8800Snmp MIBs Restart Log AR400 AR7x5 AR750S Rapier AT-8800System Enhancements Command ChangesClearing System Parameters Extended Monitoring of CPU UtilisationEnable cpu extended Disable cpu extendedReset cpu utilisation Activate cpu extendedDisable cpu extended Command Reference UpdatesEnable cpu extended Activate cpu extendedSet system contact Reset cpu utilisationSet system location Set system nameShow cpu Example output from the show cpu extended commandParameter Meaning Parts of a Command Command Line Interface CLI EnhancementsMore flexibility in Separating Parameters and Values Command Show command history Additional Shortcuts when EditingCreate config Command Line Interface CLI Enhancements Create configParameter Description Set command assignmentoperator Example output from the show command history command Show command historyAdd file File System EnhancementFile System Enhancement Create fileFile size Default 204 800 bytes Reset file permanentredirectShow file permanentredirect Software Version Parameter DescriptionFile System Enhancement Release Note Example output from the show file permanentredirect commandOrdering Hardware Filters in 48-Port Switches Switching EnhancementsCommandChange Switching EnhancementsSet switch hwfilter mode New command Show switch hwfilter New mode parameter in outputLimiting Rapid MAC Movement PortDisableEnable switch port vlan Create switch trunkSet switch port Set switch thrashlimitSet switch hwrouteupdate Route Update Queue LengthNew command Securing a Single Vlan through Switch Filters Removing a Description from a Switch PortChanged description parameter Configuring vlansecure Ethernet Protection Switching Ring Epsr Change of Debug Command SyntaxShow switch debug New DEV option in outputCreate switch trunk Disable switch filter vlansecure Disable switch debugDisable switch port vlan Debugging occurs on operations related to the switch chipEnable switch filter vlansecure Enable switch debugEnable switch port vlan Set lacp Set switch hwrouteupdate Set switch hwfilter modeSet switch port Set switch trunk Set switch thrashlimitAddress learn thrash action ..... Learn Disable Example output from the show lacp commandAddress learn thrash timeout ... second Show lacpShow switch Switching Enhancements Whether the debugging option for the router or switch is Show switch debugARL, DMA, DEV, PHY, or None Show switch hwfilter Show switch filterNew parameter in output of the show switch filter command VlanSecureNew parameters in output of the show switch port command Show switch portMeaning ModeThrashaction is set to none Add ppp acservice PPPoE Access ConcentratorSet ppp acservice Delete ppp acservicePPPoE Access Concentrator Show ppp pppoe New parameter in output of the show ppp pppoe commandEth0 InterfaceEnable mstp port Disable mstp portDisable mstp port Enable mstp portShow stp port STP EnhancementShow stp port New Port field in outputMaking Asynchronous Ports Respond More Quickly Asynchronous Port EnhancementSet asyn Show asynShow asyn Set asynTen timer value Ten timer value 100Asynchronous Port Enhancement Release Note Which characters are bundledInternet Group Management Protocol Igmp Enhancements Igmp Proxy on x900 Series SwitchesDownstream interfaces have members GroupMulticast group Downstream interfaceAdd ip interface Igmp filtering extended to all Igmp message typesSet ip interface Set ip igmp interfaceAdd igmp filter Internet Group Management Protocol Igmp EnhancementsSet igmp filter Show igmp filterMonitoring reception of Igmp general query messages MSGType=QUEryREPortLEAVe Add igmp filterSet igmp filter Add ip interfaceSet ip igmp interface Set ip interface Leaves Is attached to Recd Show igmp filterPassed Attached toNew parameters in the output of the show ip igmp command Upstream General Query Reception Timeout .... NoneShow ip igmp An Snmp trap are generatedInternet Protocol IP Enhancements Expanded IP TroubleshootingExpanded number of Eth interfaces per physical interface IP Route Preference OptionsAssigning the Filter Type IPv4 Filter ExpansionWaiting for a Response to an ARP Request Enhancements to Display of UDP Connections over IPv4New Arp wait timeout field Set ip arpwaittimeoutAdding Static ARP Entries with Multicast MAC Addresses Show ipEnable ip macdisparity Disable ip macdisparityNew IP/MAC address disparity parameter Syntax Traffic filter Add ip filterDisable ip macdisparity Reset ip counter Enable ip macdisparitySet ip arpwaittimeout Set ip route preference Set ip filterModified parameters on output of the show ip command Arp wait timeout SecsWith multicast MAC addresses. One of Enabled or Show ipInternet Protocol IP Enhancements Release Note Show ip cacheShow ip counter When the entry is usedCount Number of times the entry was found Show ip udp Show ip filterTime synchronisation using the Network Time Protocol UDP on the router or switchGeneration/reception of logs using the Secure Router Log Generation/reception of logs using the Net Manage protocolIPv6 Enhancements Show ipv6 udp New commandDisplay of UDP Connections over IPv6 IPv6 Tunnel ExpansionShow ipv6 udp L2TP Enhancements L2TP EnhancementsHandling PPP Link Negotiation Failures Resetting General L2TP CountersProxyauth=offon Add l2tp ip Disable l2tp debugEnable l2tp debug Reset l2tp counter Show l2tp ip Proxy AuthenticationShow l2tp tunnel DecodeSyntax SHow L2TP TUNnel CALL=1..65535 Show l2tp tunnel callOpen Shortest Path First Enhancements Ospf Interface PasswordNssa Translator Role Add ospf interfaceSet ospf area Add ospf areaShow ospf area Interaction with global Ospf parameters Redistributing External RoutesOspf backward compatibility Enable ospf debug Disable ospf debugAdd ospf redistribute Delete ospf redistributeNSSAStability=1..3600 NSSATranslator=CANdidateALWays Add ospf areaAdd ospf redistribute Add ospf interfaceEnable ospf debug Disable ospf debugDelete ospf redistribute BGPImport=ONOFFTrueFalseYESNO Set ospfSet ospf interface Set ospf areaSet ospf redistribute Role Show ospf areaStability Interval State Software Version 101 Show ospf redistributeBGP Backoff Lower Threshold BGP EnhancementsUpper and Lower Thresholds BGP EnhancementsBGP Peer and Peer Template Enhancements Enable and Disable BackoffDisplaying the Number of Routes from a Peer Displaying Routes Learned from a Specific BGP PeerDisplaying Information about Routes from a Peer Software Version 105 Add bgp peerAdd bgp peertemplate Disable bgp backoffSet bgp backoff Enable bgp backoffSoftware Version 107 BACkoffSet bgp peer Software Version 109 Set bgp peertemplateBGP Enhancements Release Note Show bgp backoffMem Upper Threshold Value 95% Mem Upper Notify Mem Lower Threshold Value 90% Mem Lower NotifyShow bgp route Show bgp peerRoutes learned MLD Packet Formats MLD and MLD Snooping EnhancementsIcmp type for MLDv2 Reports MLD and MLD Snooping EnhancementsChange of Maximum Query Response Interval for MLD Snooping Group Membership DisplaySoftware Version 113 Show mldsnooping More consistent outputSet ipv6 mld Enable ipv6 mld interfaceShow mldsnooping Show ipv6 mldSoftware Version 115 V2 Draft CompatibleMLD and MLD Snooping EnhancementsRelease Note Previous example output from the show mldsnooping commandCreate classifier Extension to Range of Classifier fields for x900 SwitchesSet classifier Show classifierCreate classifier Extension to Range of Classifier fields for x900 SwitchesSoftware Version 119 Set classifier Software Version 121 Show classifierIcmp code TCP FlagsIcmp type Igmp type 0x17 V2LEAVEVlan1234 Classifier Rules 2222 MAC Address Aa-bb-cc-dd-ee-ff TypeFormat Protocol 1234567890 Layer 3 Byte Offset Value MaskParameter option in brackets if available Igmp TypeTCP Flags One of URG, ACK, RST, SYN, or FINPort Groups QoS EnhancementsSoftware Version 125 Storm protection Create qos trafficclass Set qos policySet qos trafficclass Show qos trafficclassCreate qos policy Add qos portgroup portWith the enable switch port command Default portdisableCreate qos portgroup Protection is enabledCreate qos trafficclass Storm protection is inactiveWith the enable switch port command, or Is matching STORMTimeoutEnable switch port vlan command STORMRateDelete qos portgroup port POrt Port to delete from this port group Default no defaultDestroy qos portgroup Specific port that consistsSet qos policy Reset qos portgroup countersSoftware Version 133 Uses Kbps. If you specify Mbps or Gbps, the rate Set qos portgroupSoftware Version 135 Parameter Description Set qos trafficclassIs disabled by storm protection With the enable switch port or enable switchShow qos policy QoS Enhancements Release Note Parameter DescriptionShow qos port Rate 1kbps Window 100ms Timeout NonePorts Assigned to Port Groups Assigned to 213-24 Storm Protection StatusQoS EnhancementsRelease Note Show qos portgroupPort Group Trunk Group None Show qos portgroup counters Parameters in output of the show qos portgroup commandSoftware Version 139 Integer from 1 to140 Number of bytes that conforms with band with class Show qos trafficclassStorm Protection Configuring the Server Configuring Secure CopyConfiguring the Client Secure Copy SCPUse the show ssh session command to see current sessions Configuring UsersManaging Secure Copy Sessions Software Version 143Loading Files to the Switch Loading using Secure CopyUploading from the Switch Uploading using Secure CopyLoading Files from a Remote Machine Software Version 145Load Uploading Files from a Remote MachineSet loader Show loaderDisable ssh server Disable ssh debugDelete ssh session Software Version 147Enable ssh server Enable ssh debugWhether the SSH server supports SCP connections Software Version 149 LoadDefault tftp Copy is the default method for loading and uploadingSet loader Software Version 151 Set ssh clientShow loader Set ssh server192.168.1.1 AliceShow ssh SSH Server Enabled SCP ServiceSoftware Version 153 DebugShow ssh counter Reset loader commandSoftware Version 155 Show ssh sessionParameter Meaning WriteFileFailed FailureParameter Meaning Secure Shell Session Secure Copy SCP Release NoteSoftware Version 157 UploadCharacters long Show ssl counters SSL Counter EnhancementSSL Counter Enhancement Show ssl countersBadSessionIdLen Software Version 159Session ID longer than 32 bytes Client Counters for the SSL client BadSessionIdLenFirewall Licencing Firewall EnhancementsDisabling SIP ALG Call ID Translation Firewall EnhancementsDisplaying SIP ALG Session Details Set firewall sipalg New commandFirewall Policy Rules Expansion Software Version 161Displaying a Subset of Policy Rules Reset firewall sipalg counterSet firewall sipalg Show firewall policyShow firewall policy Show firewallIp or callid commands Valid with the ip or summary commandsShow firewall sipalg CALLIdService Parameters in output of the show firewall sipalg commandWithin the private network protected by the firewall Active SIP SessionsFirewall Enhancements Release Note Router or switch. The router or switch only translates IPGbl IP Seen on the public side of the firewallSince start up or reset Past sessions Start up or reset Current sessions Audio sessions createdShow firewall sipalg counter Current SIP sessionsThem Total number of SIP messages received that the SIP ALGResponding to IPsec Packets from an Unknown Tunnel Enhancements to IPsec/VPNSoftware Version 169 Modifying the Message Retransmission Delay Retrying Isakmp Phase 1 and 2 Negotiations New retryikeattempts parameter VPN Tunnel LicencingNew retryIkeAttemptsPh1 and retryIkeAttemptsPh2 New usePolIkeRetryGood and usePolIkeRetryFailedSoftware Version 173 Create ipsec policyMsgtimeout value Default incrementalCreate isakmp policy Msgbackoff parameterRETRYIKEattempts After the first 16 attempts, a five minute delayAttempted over new Isakmp SAs Occurs between attemptsSet ipsec policy Software Version 177 Set isakmp policyVPNs Maximum Current Peak Show ipsecParameter Meaning VPNs Software Version 179 Show ipsec policyRespond Bad SPI Respond Bad SPIInBadSpiResponse Show ipsec policy counterInBadSpiResponse To true and packets processed by that policy have anSoftware Version 181 Show isakmp countersRetryIkeAttemptsPh1 RetryIkeAttemptsPh2 UsePolIkeRetryGood UsePolIkeRetryFailed Software Version 183 Show isakmp exchangeMessage Back-off Incremental Same NoneShow isakmp policy Iskamp policy commandSoftware Version 185 Show isakmp saMessage Back-off None Shdsl Line MIB Snmp MIBsSnmp MIBs Snmp request not processed due to excessive memory Logging Snmp operationUsage Snmp Trap not sent due to excessive memory usage Traps on Ospf state changesTraps on Mstp state and topology changes Trap on Vrrp topology changesSoftware Version 189 Restart Log Trap on Login FailuresVLAN-based port state changes Software Version 191 Trap on Memory LevelsShow buffer New Buffer level 0 fieldShow buffer New parameters in output of the show buffer commandBuffer level 1500 Parameter Meaning Buffer level nCDP over WAN Interfaces Disable lldp cdp ppptemplate Disable lldp cdp interfaceEnable lldp cdp debug CDP over WAN InterfacesEnable lldp cdp ppptemplate Enable lldp cdp interfaceEnables debugging of PPP events Software Version 195Show lldp cdp PPP Templates Enabled PPP Templates DisabledShow lldp cdp interface Ppp0 Ppp1Software Version 197 Permanent Assignments on AR400 Series RoutersPage Chapter Introduction to Ethernet Protection Switching Ring EpsrEpsr Instances and Domains Introduction to Ethernet Protection Switching Ring EpsrControl Vlan Ethernet Protection Switching Ring EpsrData Vlan Master NodeMaster Node Polling Fault Detection Fault Detection and RecoveryTransit Node Unsolicited Fault Detection Fault Recovery Procedure Restoring Normal Operation Epsr Single Domain, Single Ring Network Configuring Epsr# For Transit Nodes 1, 2 Example script for a 4 node ring networkSingle Ring, Dual Domain Network # Node 1 Master node for RingA Transit Node for RingB Example script for a Single Ring, Two Domain Network NodeExample script for a Single Ring, Two Domain Network Nodes 2 # Node 3 Transit node for RingA Master Node for RingB Epsr and Spanning Tree Operation # For Transit Node # For Transit Nodes 2 Command ReferenceAdd epsr datavlan Add epsr datavlanCreate epsr Ethernet Protection Switching Ring Epsr Create epsrSeconds 32767s. Only configured for the master node Only configured for the master nodeDefault 1s FAilovertime Default 2s RIngflaptimeHyphen character -. The epsr-name cannot be ALL Delete epsr datavlanUnique name for the VLAN. This can be from 1 to Vlan-name cannot be a number or ALLDestroy epsr Destroy epsrEthernet Protection Switching Ring Epsr Disable epsr Disable epsrEpsr instance to be disabled String, 1 to 15 characters long. Valid characters areDisable epsr debug Disable epsr debugEthernet Protection Switching Ring Epsr Enable epsr Enable epsrEpsr instance to be enabled Enable epsr debug Enable epsr debugEpsr instance whose debugging is to be enabled OUTputPurge epsr Ethernet Protection Switching Ring Epsr Purge epsrSet epsr Set epsrSet epsr port Ethernet Protection Switching Ring Epsr Set epsr portEpsr to be set for the port VLANs within the ring domainShow epsr Show epsrEpsr instance whose details are displayed Ethernet Protection Switching Ring Epsr Show epsr Second Port Disabled. This parameter is only shown for a transit nodeShown for a transit node Second Port StatusShow epsr counter Ethernet Protection Switching Ring Epsr Show epsr counterCOUnter Epsr instancesRelated Commands show epsr Show epsr debug Show epsr debug