| Parameter | Description | Value |
|---|---|---|
v1 |
Displays IKEv1 statistics. |
- |
v2 |
Displays IKEv2 statistics. |
- |
slot slot-id cpu cpu-id |
Displays IKE statistics on a specified CPU in a specified slot. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter. |
The values of slot-id and cpu-id are integers and must be set according to the device configuration. |
When a fault occurs on the IPSec tunnel that is established through IKE negotiation, you can check statistics about IKE peers, IKE SAs, and DPD packets to diagnose and locate the fault.
# Display IKEv1 statistics.
<sysname> display ike statistics v1 -------------------------------------------------------------------------------- Slot 1 cpu 2 IKE V1 statistics information Number of total peers : 7 Maximum of total peers in history : 0 Begin time of total peers : 2015-04-08 21:23:10 Maximum time of total peers : 2015-04-08 21:23:10 Number of proposals : 4 Number of established V1 phase 1 SAs : 0 Number of established V1 phase 2 SAs : 0 Number of total V1 phase 1 SAs : 0 Number of total V1 phase 2 SAs : 0 Number of total SAs : 0 Maximum of V1 phase 1 SAs in history : 0 Begin time of V1 phase 1 SAs : 2015-04-08 21:23:10 Maximum time of V1 phase 1 SAs : 2015-04-08 21:23:10 Maximum of V1 phase 2 SAs in history : 0 Begin time of V1 phase 2 SAs : 2015-04-08 21:23:10 Maximum time of V1 phase 2 SAs : 2015-04-08 21:23:10 Maximum of total SAs in history : 0 Begin time of total SAs : 2015-04-08 21:23:10 Maximum time of total SAs : 2015-04-08 21:23:10 Number of messages in V1 fast queue : 0 Number of messages in V1 slow queue : 0 Number of DPD request sent : 0 Number of DPD ack received : 0 Number of DPD request received : 0 Number of DPD ack sent : 0 Number of DPD request receive dropped : 0 Number of DPD ack receive dropped : 0 --------------------------------------------------------------------------------
# Display IKEv2 statistics.
<sysname> display ike statistics v2 -------------------------------------------------------------------------------- Slot 1 cpu 2 IKE V2 statistics information Number of total peers : 0 Maximum of total peers in history : 0 Begin time of total peers : 2015-04-08 21:23:10 Maximum time of total peers : 2015-04-08 21:23:10 Number of proposals : 4 Number of established V2 phase 1 SAs : 0 Number of established V2 phase 2 SAs : 0 Number of total V2 phase 1 SAs : 0 Number of total V2 phase 2 SAs : 0 Number of total SAs : 0 Maximum of V2 phase 1 SAs in history : 0 Begin time of V2 phase 1 SAs : 2015-04-08 21:23:10 Maximum time of V2 phase 1 SAs : 2015-04-08 21:23:10 Maximum of V2 phase 2 SAs in history : 0 Begin time of V2 phase 2 SAs : 2015-04-08 21:23:10 Maximum time of V2 phase 2 SAs : 2015-04-08 21:23:10 Maximum of total SAs in history : 0 Begin time of total SAs : 2015-04-08 21:23:10 Maximum time of total SAs : 2015-04-08 21:23:10 Number of messages in V2 fast queue : 0 Number of messages in V2 slow queue : 0 Number of DPD request sent : 0 Number of DPD ack received : 0 Number of DPD request received : 0 Number of DPD ack sent : 0 Number of DPD request receive dropped : 0 Number of DPD ack receive dropped : 0 --------------------------------------------------------------------------------
Item
|
Description |
|---|---|
Slot 1 cpu 2 |
SPU Slot ID and CPU ID. |
IKE V1 statistics information |
IKEv1 statistics. |
IKE V2 statistics information |
IKEv2 statistics. |
Number of total peers |
Total number of peers. |
Maximum of total peers in history |
Historical maximum number of IKE peers. |
Begin time of total peers |
Time when the system started to count the number of IKE peers. |
Maximum time of total peers |
Time when the total number of IKE peers reached the maximum value. |
Number of proposals |
Number of IKE proposals. |
Number of established V1/V2 phase 1 SAs |
Total number of IKE SAs that have been established successfully. |
Number of established V1/V2 phase 2 SAs |
Total number of IPSec SAs that have been established successfully. |
Number of total V1/V2 phase 1 SAs |
Total number of IKE SAs. |
Number of total V1/V2 phase 2 SAs |
Total number of IPSec SAs. |
Number of total SAs |
Total number of SAs. |
Maximum of V1/V2 phase 1 SAs in history |
Maximum number of IKE SAs in the history. |
Begin time of V1/V2 phase 1 SAs |
Time when the system started to count the number of IKE SAs. |
Maximum time of V1/V2 phase 1 SAs |
Time when the total number of IKE SAs reaches the maximum value. |
Maximum of V1/V2 phase 2 SAs in history |
Maximum number of IPSec SAs in the history. |
Begin time of V1/V2 phase 2 SAs |
Time when the system started to count the number of IPSec SAs. |
Maximum time of V1/V2 phase 2 SAs |
Time when the total number of IPSec SAs reached the maximum value. |
Maximum of total SAs in history |
Maximum number of total SAs in the history. |
Begin time of total SAs |
Time when the system started to count the total number of SAs. |
Maximum time of total SAs |
Time when the total number of SAs reached the maximum value. |
Number of messages in V1/V2 fast queue |
Number of IKE messages in high-priority queues. NOTE:
This field is unavailable in the virtual system. |
Number of messages in V1/V2 slow queue |
Number of IKE messages in low-priority queues. NOTE:
This field is unavailable in the virtual system. |
Number of DPD request sent |
Number of DPD request packets sent from the local end. |
Number of DPD ack received |
Number of DPD ack packets received by the local end. |
Number of DPD request received |
Number of DPD request packets received by the local end. |
Number of DPD ack sent |
Number of DPD ack packets sent from the local end. |
Number of DPD request receive dropped |
Number of received DPD request packets that are dropped. |
Number of DPD ack receive dropped |
Number of received DPD response packets that are dropped. |