installed SA table so that SA could be renegotiated. This option is provided by the flush command.
Property Description
sa-type ( multiple choice: ah | all | esp ; default: all ) - specifies SA types to flush
• ah - delete AH protocol SAs only
• esp - delete ESP protocol SAs only
• all - delete both ESP and AH protocols SAs
Example
To flush all the SAs installed:
[admin@MikroTik] ip ipsec installed-sa> flush
[admin@MikroTik] ip ipsec installed-sa> print
[admin@MikroTik] ip ipsec installed-sa>
Counters
Home menu level: /ip ipsec counters
Property Description
in-accept ( read-only: integer ) - shows how many incoming packets were matched by accept
policy
in-accept-isakmp ( read-only: integer ) - shows how many incoming UDP packets on port 500
were let through without matching a policy
in-decrypted ( read-only: integer ) - shows how many incoming packets were successfully
decrypted
in-drop ( read-only: integer ) - shows how many incoming packets were matched by drop policy
(or encrypt policy with level=require that does not have all necessary SAs)
in-drop-encrypted-expected ( read-only: integer ) - shows how many incoming packets were
matched by encrypt policy and dropped because they were not encrypted
out-accept ( read-only: integer ) - shows how many outgoing packets were matched by accept
policy (including the default "accept all" case)
out-accept-isakmp ( read-only: integer ) - shows how many locally originated UDP packets on
source port 500 (which is how ISAKMP packets look) were let through without policy matching
out-drop ( read-only: integer ) - shows how many outgoing packets were matched by drop policy
(or encrypt policy with level=require that does not have all necessary SAs)
out-encrypt ( read-only: integer ) - shows how many outgoing packets were encrypted
successfully
Example
To view current statistics:
[admin@WiFi] ip ipsec> counters print
out-accept: 6
Page 312 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
To Next Page
Loading...