< Home

ipsec policy-statistics enable

Function

The ipsec policy-statistics enable command enables traffic statistics collection based on an IPSec policy.

The undo ipsec policy-statistics enable command disables traffic statistics collection based on an IPSec policy.

By default, traffic statistics collection based on an IPSec policy is disabled.

The virtual system does not support this command.

Format

ipsec policy-statistics enable

undo ipsec policy-statistics enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

By default, the device collects traffic statistics based on the IPSec tunnel. However, this method is not proper for traffic monitoring of the NMS. The NMS needs to collect statistics about IPSec packet encryption and decryption between the headquarters and branch, without differentiating data flows. The headquarters network administrator needs to obtain statistics about the IPSec traffic accumulated by all branches. You can enable traffic statistics collection based on the IPSec policy to meet NMS demands of monitoring the traffic.

Follow-up Procedure

Run the display ipsec statistics command to display the traffic statistics based on the IPSec policy, or implement traffic monitoring through NMS.

Example

# Enable traffic statistics collection based on the IPSec policy.

<sysname> system-view
[sysname] ipsec policy-statistics enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >