Table of Contents
Advertisement
JUNOSe 11.0.x IP Services Configuration Guide
174
Monitoring IPSec
InUserPackets Number of user packets received
InUserOctets Number of octets received from user packets
InAccPackets Number of encapsulated packets received
InAccOctets Number of octets received in encapsulated packets
InAuthErrors Number of authentication errors received
InReplayErrors Number of replay errors in received traffic
InPolicyErrors Number of policy errors in received traffic
InOtherRxErrors Number of packets received that have errors other
than those listed above
InDecryptErrors Number of decryption errors in received traffic
InPadErrors Number of packets received that had invalid values after
the packet was decrypted
OutUserPackets Number of user packets sent
OutUserOctets Number of octets sent in user packets
OutAccPackets Number of encapsulated packets sent
OutAccOctets Number of octets sent in encapsulated packets
OutPolicyErrors Number of packets arriving at tunnel for encapsulation
that do not meet specified tunnel identifier (selector)
OutOtherTxErrors Number of outbound packets that have errors other
than those listed above
Example
hostl#show ipsec tunnel detail
IPSEC tunnel r200000 is Up
Tunnel configuration:
Tunnel type is signaled
Tunnel mtu is 1440
Tunnel local endpoint is 195.0.0.200
Tunnel remote endpoint is 195.0.0.100
Tunnel source is 195.0.0.200
Tunnel destination is 195.0.0.100
Tunnel backup destination is 0.0.0.0
Tunnel transport virtual router is r
Tunnel transform set is perf
Tunnel local identity is ipAddress: 4.0.0.100
Tunnel peer identity is ipAddress: 3.0.0.100
Tunnel lifetime seconds is 7200
Tunnel lifetime kilobytes is 1024000
Tunnel pfs is group 5
Tunnel administrative state is Up
Tunnel Operational Attributes:
inboundSpi
= 0x17270202, inboundSa = esp-3des-hmac-sha
Advertisement
Table of Contents
