Monitoring Ipsec Tunnels - Juniper J2300 User Manual

J-series™ Services Router User Guide
Table 78: Summary of Key Firewall and IDS Output Fields
Field Values
Stateful Firewall
Protocol Protocol used for the specified stateful firewall flow.
Source IP
Source prefix of the stateful firewall flow.
Source Port Source port number of stateful firewall flow.
Destination IP Destination prefix of the stateful firewall flow.
Destination Port
Destination port number of the stateful firewall flow.
Flow State Status of the stateful firewall flow:
Direction
Direction of the flow: I (input) or O (output).
Frames Number of frames in the flow.
IDS Information
Source Address Source address for the event.
Destination address Destination address for the event.
Time Total time the information has been in the IDS table.
Bytes
Total number of bytes sent from the source to the destination address, in thousands (k) or millions
(m).
Packets Total number of packets sent from the source to the destination address, in thousands (k) or
millions (m).
Flows Total number of flows of packets sent from the source to the destination address, in thousands (k)
or millions (m).
Anomalies Total number of anomalies in the anomaly table, in thousands (k) or millions (m).
Application Configured application, such as FTP or telnet.

Monitoring IPSec Tunnels

IPSec tunnel information includes information about active IPSec tunnels
configured on the Services Router, as well as traffic statistics through the
tunnels. To view IPSec tunnel information, select Monitor>IPSec in the J-Web
interface, or enter the following CLI
Table 79 summarizes key output fields in IPSec displays.
216
Using the Monitoring Tools
Drop—Drop all packets in the flow without response.
Forward—Forward the packet in the flow without inspecting it.
Reject—Drop all packets in the flow with response.
Watch—Inspect packets in the flow.
show services ipsec-vpn ipsec statistics
show services ipsec-vpn ike security-associations
commands:
show