Chapter 5
Troubleshooting SpeedTouch™ IPSec
5.2 Via the CLI: Show command group
Show command group | You can check whether the secure tunnels are up: |
:IPSec show sadb
You can check whether traffic is passing the tunnel and keep track of the number of packets and bytes. Therefore, take a snapshot of the number of packets/bytes that hit an IPSec policy rule via following CLI command:
[ipsec]=>show [ipsec show]=>stats
SNMP |
|
|
===== |
|
|
ikeGlobalStats |
|
|
: | 0 | |
ikeGlobalActiveTunnels | ||
ikeGlobalPreviousTunnels | : | 0 |
ikeGlobalInOctets | : | 0 |
ikeGlobalInPackets | : | 0 |
ikeGlobalInDropPackets | : | 0 |
ikeGlobalInNotify | : | 0 |
ikeGlobalInP2Exchgs | : | 0 |
ikeGlobalInP2ExchgsInvalids | : | 0 |
ikeGlobalInP2ExchgsRejects | : | 0 |
ikeGlobalInP2SaDelRequests | : | 0 |
ikeGlobalOutOctets | : | 0 |
ikeGlobalOutPackets | : | 0 |
ikeGlobalOutDropPackets | : | 0 |
ikeGlobalOutNotify | : | 0 |
ikeGlobalOutP2Exchgs | : | 0 |
ikeGlobalOutP2ExchgsInvalids | : | 0 |
ikeGlobalOutP2ExchgsRejects | : | 0 |
ikeGlobalOutP2SaDelRequests | : | 0 |
ikeGlobalInitTunnels | : | 0 |
ikeGlobalInitTunnelsFails | : | 0 |
ikeGlobalRespTunnelsFails | : | 0 |
ikeGlobalAuthFails | : | 0 |
ikeGlobalDecryptFails | : | 0 |
ikeGlobalHashValidFails | : | 0 |
ikeGlobalNoSaFails | : | 0 |
ikeGlobalRespTunnels | : | 0 |
ikeGlobalInXauthFailures | : | 0 |
ikeGlobalOutXauthFailures | : | 0 |
ikeGlobalInP1SaDelRequests | : | 0 |
ikeGlobalOutP1SaDelRequests | : | 0 |
ikeGlobalInConfigs | : | 0 |
ikeGlobalOutConfigs | : | 0 |
ikeGlobalInConfigsRejects | : | 0 |
ikeGlobalOutConfigsRejects | : | 0 |
ikeGlobalHcPreviousTunnels | : | 281483566645248 |
ikeGlobalPreviousTunnelsWraps : | 0 | |
... |
|
|
165 | |
|
