Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual page 192

JunosE 11.3.x IP Services Configuration Guide
show ipsec tunnel summary
166
OutPolicyErrors—Number of packets arriving at tunnel for encapsulation that do
not meet specified tunnel identifier (selector)
OutOtherTxErrors—Number of outbound packets that have errors other than those
listed above
Example
hostl#show ipsec tunnel detail
IPSEC tunnel r200000 is Up
Tunnel configuration:
Tunnel type is signaled
Tunnel mtu is 1440
Tunnel local endpoint is 195.0.0.200
Tunnel remote endpoint is 195.0.0.100
Tunnel source is 195.0.0.200
Tunnel destination is 195.0.0.100
Tunnel backup destination is 0.0.0.0
Tunnel transport virtual router is r
Tunnel transform set is perf
Tunnel local identity is ipAddress: 4.0.0.100
Tunnel peer identity is ipAddress: 3.0.0.100
Tunnel lifetime seconds is 7200
Tunnel lifetime kilobytes is 1024000
Tunnel pfs is group 5
Tunnel administrative state is Up
Tunnel Operational Attributes:
inboundSpi = 0x17270202, inboundSa = esp-3des-hmac-sha
inbound lifetime: allowed 7200s, remaining 7100s
inbound traffic: allowed 1024000KB, remaining 1023997KB
outboundSpi = 0x283b0201,
outbound lifetime: allowed 7200s, remaining 7100s
outbound traffic: allowed 1024000KB, remaining 1023997KB
Tunnel Statistics:
InUserPackets
InUserOctets
InAccPackets
InAccOctets
InAuthErrors
InReplayErrors
InPolicyErrors
InOtherRxErrors
InDecryptErrors
InPadErrors
OutUserPackets
OutUserOctets
OutAccPackets
OutAccOctets
OutPolicyErrors
OutOtherTxErrors
See show ipsec tunnel.
outboundSa = esp-3des-hmac-sha
15
1920
15
2760
0
0
0
0
0
0
15
1920
15
2760
0
0
Copyright © 2010, Juniper Networks, Inc.