Nortel 3050 Command Reference Manual page 48

48 Command Reference
Table 9
Cluster Wide SSL Statistics for VPN Menu Options (/stats/sslstats/vpn) (cont'd.)
Command Syntax and Usage
renegotiat
handshakeg
cachemisse
cachetimeo
Copyright © 2007 Nortel Networks
.
Displays the number of initiated SSL client connections for the current
virtual VPN.
Displays the number of times clients have requested a renegotiation of
the SSL connection for the current VPN.
Displays the number of successfully completed SSL handshakes for
the current VPN.
The number of failed SSL handshakes equals the combined values for
SSL accept and SSL renegotiate requests, minus the combined values
for SSL handshakes completed and Number of currently active
request sessions.
You can view the values mentioned above by using the/stats/dump
command.
Displays the number of times clients have made requests to reuse a
particular session ID, and that session ID was not found in the SSL
cache.
If there is a high number of cache misses in combination with a high
value for cachefull, you may consider increasing the SSL cache size of
the virtual SSL server. To change the current SSL cache size, use the
/cfg/vpn #/server/ssl/cachesize command. The default SSL
cache size is 4000 items.
If there is a high number of cache misses in combination with a
low value for cachefull, you may consider increasing the cachettl
value. To change the current cachettl value, use the /cfg/vpn
#/server/ssl/cachettl command.
The default SSL cache timeout value is 5 minutes.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007