2 via the cli: show command group, Show command group, Via the cli: show command group – Nortel Networks 608(WL) User Manual

Page 167: Chapter 5

Advertising
background image

Chapter 5

Troubleshooting SpeedTouch™ IPSec

E-DOC-CTC-20051017-0169 v0.1

165

5.2 Via the CLI: Show command group

Show command group



You can check whether the secure tunnels are up:



You can check whether traffic is passing the tunnel and keep track of the
number of packets and bytes. Therefore, take a snapshot of the number of
packets/bytes that hit an IPSec policy rule via following CLI command:

:IPSec show sadb

[ipsec]=>show
[ipsec show]=>stats

SNMP
=====
ikeGlobalStats
--------------
ikeGlobalActiveTunnels : 0
ikeGlobalPreviousTunnels : 0
ikeGlobalInOctets : 0
ikeGlobalInPackets : 0
ikeGlobalInDropPackets : 0
ikeGlobalInNotify : 0
ikeGlobalInP2Exchgs : 0
ikeGlobalInP2ExchgsInvalids : 0
ikeGlobalInP2ExchgsRejects : 0
ikeGlobalInP2SaDelRequests : 0
ikeGlobalOutOctets : 0
ikeGlobalOutPackets : 0
ikeGlobalOutDropPackets : 0
ikeGlobalOutNotify : 0
ikeGlobalOutP2Exchgs : 0
ikeGlobalOutP2ExchgsInvalids : 0
ikeGlobalOutP2ExchgsRejects : 0
ikeGlobalOutP2SaDelRequests : 0
ikeGlobalInitTunnels : 0
ikeGlobalInitTunnelsFails : 0
ikeGlobalRespTunnelsFails : 0
ikeGlobalAuthFails : 0
ikeGlobalDecryptFails : 0
ikeGlobalHashValidFails : 0
ikeGlobalNoSaFails : 0
ikeGlobalRespTunnels : 0
ikeGlobalInXauthFailures : 0
ikeGlobalOutXauthFailures : 0
ikeGlobalInP1SaDelRequests : 0
ikeGlobalOutP1SaDelRequests : 0
ikeGlobalInConfigs : 0
ikeGlobalOutConfigs : 0
ikeGlobalInConfigsRejects : 0
ikeGlobalOutConfigsRejects : 0
ikeGlobalHcPreviousTunnels : 281483566645248
ikeGlobalPreviousTunnelsWraps : 0
...

Advertising
This manual is related to the following products:

620