Ipsec examples, Amples, Changing the key – Brocade Virtual ADX Switch and Router Guide (Supporting ADX v03.1.00) User Manual
Page 188: Rollover timer, Sect, Changing the key rollover timer, Clearing ipsec statistics
174
Brocade Virtual ADX Switch and Router Guide
53-1003246-01
Enabling OSPFv3
7
Changing the key rollover timer
Configuration changes for authentication takes effect in a controlled manner through the key
rollover procedure as specified in RFC 4552, Section 10.1. The key rollover timer controls the
timing of the configuration changeover. The key rollover timer can be configured in the IPv6 router
OSPF context, as the following example illustrates.
Virtual ADX(config-ospf6-router)# key-rollover-interval 200
Syntax: key-rollover-interval time
The range for the key-rollover-interval is 0 through14400 seconds. The default is 300 seconds.
Clearing IPsec statistics
This section describes the clear ipsec statistics command for clearing statistics related to IPsec.
The command resets to 0 the counters (which you can view as a part of IPSecurity Packet
Statistics). The counters hold IPsec packet statistics and IPsec error statistics. The following
example illustrates the show ipsec statistics output.
To clear the statistics, enter the clear ipsec statistics command as in the following example.
Virtual ADX#clear ipsec statistics
Syntax: clear ipsec statistics
This command takes no parameters.
IPsec examples
This section contains examples of IPsec configuration and the output from the IPsec-specific show
commands. In addition, IPsec-related information appears in general show command output for
interfaces and areas.
The show commands that are specific to IPsec are:
•
show ipsec sa
•
show ipsec policy
•
show ipsec statistics
The other show commands with IPsec-related information are:
•
show ipv6 ospf area
•
show ipv6 ospf interface
Virtual ADX#show ipsec statistics
IPSecurity Statistics
secEspCurrentInboundSAs 1 ipsecEspTotalInboundSAs: 2
secEspCurrentOutboundSA 1 ipsecEspTotalOutboundSAs: 2
IPSecurity Packet Statistics
secEspTotalInPkts: 20 ipsecEspTotalInPktsDrop: 0
secEspTotalOutPkts: 84
IPSecurity Error Statistics
secAuthenticationErrors 0
secReplayErrors: 0 ipsecPolicyErrors: 13
secOtherReceiveErrors: 0 ipsecSendErrors: 0
secUnknownSpiErrors: 0