The ipsec policy-statistics enable command enables traffic statistics collection based on an IPSec policy.
The undo ipsec policy-statistics enable command disables traffic statistics collection based on an IPSec policy.
By default, traffic statistics collection based on an IPSec policy is disabled.
By default, the device collects traffic statistics based on the IPSec tunnel. However, this method is not proper for traffic monitoring of the NMS. The NMS needs to collect statistics about IPSec packet encryption and decryption between the headquarters and branch, without differentiating data flows. The headquarters network administrator needs to obtain statistics about the IPSec traffic accumulated by all branches. You can enable traffic statistics collection based on the IPSec policy to meet NMS demands of monitoring the traffic.
Follow-up ProcedureRun the display ipsec statistics command to display the traffic statistics based on the IPSec policy, or implement traffic monitoring through NMS.