Field Description
protocol Protocol type.
SPI SPI of the IPsec SA.
Transform set Security protocol and algorithms used by the IPsec transform set.
SA duration (kilobytes/sec) IPsec SA lifetime, in kilobytes or seconds.
SA remaining duration (kilobytes/sec) nds. Remaining IPsec SA lifetime, in kilobytes or seco
Max received sequence-number Max sequence number in the received packets.
Max sent sequence-number Max sequence number in the sent packets.
Anti-replay check enable Whether any-replay checking is enabled.
UDP encapsulation used for NAT traversal
Whether NAT traversal is used by the IPsec SA.
Status IPsec SA stateful failover status: active or backup.
No duration limit for this SA The manual IPsec SAs do not have lifetime.
Related c
-duration
• reset ipsec sa
display ipsec statistics
Use display ipsec statistics to display IPsec packet statistics.
Syntax
display ipsec statistics [ tunnel-id tunnel-id ]
Views
Predefine
ork-operator
Paramete
295. You can use
y ipsec tunnel brief command to view the IDs of established IPsec tunnels.
Usage gu
you do not specify any parameters, this command displays statistics for all IPsec packets.
Examples
ommands
• ipsec sa global
Any view
d user roles
network-admin
netw
rs
tunnel-id tunnel-id: Specifies an IPsec tunnel by its ID. The value range is 0 to 4294967
the displa
idelines
If
# Display statistics for all IPsec packets.
326
To Next Page
Loading...
Need help?
General
