The display ipv6 nd security statistics command displays the statistics of IPv6 SEND messages on a specified interface.
| Parameter | Description | Value |
|---|---|---|
| interface-type interface-number | Specifies the type and the number of an interface. That is, the statistics on IPv6 SEND messages on the specified interface are displayed. | - |
Usage Scenario
You can run the display ipv6 nd security statistics command to check whether SEND functions properly.
# Display the statistics on SEND messages on GE 1/0/0.
<sysname> display ipv6 nd security statistics GigabitEthernet 0/0/0
Received Packet Statistics: ------------------------------------------------------------------------------ Type NA NS RA RS Redirect ------------------------------------------------------------------------------ Total 0 0 0 0 0 Secured 0 0 0 0 0 Unsec: No CGA 0 0 0 0 0 Unsec: No RSA 0 0 0 0 0 Unsec: KeyLen Mismatch 0 0 0 0 0 Unsec: Others 0 0 0 0 0 Sent Packet Statistics: ------------------------------------------------------------------------------ Type NA NS RA RS Redirect ------------------------------------------------------------------------------ Sent 0 0 0 0 0 Aborted 0 0 0 0 0 Dropped Packet Statistics: ------------------------------------------------------------------------------ Type NA NS RA RS Redirect ------------------------------------------------------------------------------ No Nonce 0 0 0 0 0 No TS 0 0 0 0 0 CGA Verify Fail 0 0 0 0 0 RSA Verify Fail 0 0 0 0 0 Nonce Verify Fail 0 0 0 0 0 TS Verify Fail 0 0 0 0 0 RateLimit 0 0 0 0 0 Fully Secured Mode 0 0 0 0 0 Proxy packet 0 0 0 0 0
Item |
Description |
|---|---|
Type |
Message type, including NA, NS, Router Advertisement (RA), Router Solicitation (RS), and Redirect messages |
Received Packet Statistics |
Statistics on received messages |
Total |
Total number of received ND messages |
Secured |
Total number of received SEND messages |
Unsec: No CGA |
Total number of received insecure ND messages that do not carry CGA options |
Unsec: NO RSA |
Total number of received insecure ND messages that do not carry RSA options |
Unsec: KeyLen Mismatch |
Total number of received insecure ND messages in which the key length is out of the allowed length range |
Unsec: Others |
Total number of received insecure ND messages excluding messages that do not carry CGA options, messages that do not carry RSA options, and messages in which the key length is out of the allowed length range |
Sent Packet Statistics |
Statistics on sent messages |
Sent |
Total number of sent ND messages |
Aborted |
Total number of messages that are discarded before being sent |
Dropped Packet Statistics |
Statistics on discarded messages |
No Nonce |
Total number of received ND messages that do not carry Nonce options |
No TS |
Total number of received ND messages that do not carry Timestamp options |
CGA Verify Fail |
Total number of messages that fail CGA verification |
RSA Verify Fail |
Total number of messages that fail RSA signature verification |
Nonce Verify Fail |
Total number of messages that fail Nonce option verification |
TS Verify |
Total number of messages that fail Timestamp option verification |
RateLimit |
Total number of messages discarded when upper threshold of the RSA signature calculation and verification rate limit reached the configured value. |
Fully Secured Mode |
Total number of received insecure ND messages that are received by the interface enabled with the strict security mode |
Proxy packet |
Total number of discarded SEND messages after ND proxy is enabled (ND proxy and SEND cannot be enabled at the same time) |