display ipsec statistics sa-name

Function

The display ipsec statistics command displays statistics about packets processed by IPsec.

Format

display ipsec statistics sa-name sa-name [ slot slot-number ]

Parameters

Parameter	Description	Value
sa-name sa-name	Specifies the IPsec Security Association (SA) name.	It is a string of 1 to 15 case-sensitive characters, spaces not supported. The characters can be letters or numbers, hyphens (-) not supported. When double quotation marks are used around the string, spaces are allowed in the string.
slot slot-number	Specifies the slot number on which IPsec component is running.	-

Parameter

Description

Value

sa-name sa-name

Specifies the IPsec Security Association (SA) name.

It is a string of 1 to 15 case-sensitive characters, spaces not supported. The characters can be letters or numbers, hyphens (-) not supported. When double quotation marks are used around the string, spaces are allowed in the string.

slot slot-number

Specifies the slot number on which IPsec component is running.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
ipsec	read

Usage Guidelines

Usage Scenario

After configuring IPsec, you can run the display ipsec statistics command to check statistics about the packets that are received, sent, or discarded by IPsec. The statistics include the following:

Number of received and sent packets
Number of received and sent bytes in packets
Number of discarded incoming and outgoing packets
Detailed information about discarded packets

Example

The actual command output varies according to the device. The command output here is only an example.

# Display statistics about packets processed by IPsec.

<HUAWEI> display ipsec statistics sa-name sa1
  IPv6 security packet statistics:
    Current system time: 2017-02-22 20:25:23
    input/output security packets: 0/0
    input/output security bytes: 0/0
    input/output dropped security packets: 0/0
    dropped security packet detail:
      memory process problem: 0
      can't find SA: 0
      queue is full: 0
      authentication is failed: 0
      wrong length: 0
      replay packet: 0
      too long packet: 0
      invalid SA: 0
      policy deny: 0
  the normal packet statistics:
    input/output dropped normal packets: 0/0

  SPU board slot 1 information:
  the security packet statistics:
    Current system time: 2017-02-22 20:25:23
    input/output security packets: 0/0
    input/output security bytes: 0/0
    input/output dropped security packets: 0/0
    dropped security packet detail:
      memory process problem: 0
      can't find SA: 0
      queue is full: 0
      authentication is failed: 0
      wrong length: 0
      replay packet: 0
      too long packet: 0
      invalid SA: 0
      policy deny: 0
  the normal packet statistics:
    input/output dropped normal packets: 0/0

**Table 1** Description of the **display ipsec statistics sa-name** command output
Item	Description
IPv6 security packet statistics	Statistics about IPv6 security packets.
Current system time	Current time of the system.
input/output security packets	Number of received and sent packets.
input/output security bytes	Number of received and sent bytes in packets.
input/output dropped security packets	Number of discarded incoming and outgoing packets.
input/output dropped normal packets	Number of normal packets that are discarded in the receive and transmit directions.
dropped security packet detail	Detailed information about discarded packets.
memory process problem	Number of packets discarded due to storage problems.
can't find SA	Number of packets discarded because no SA is found.
queue is full	Number of packets discarded because the queue is full.
authentication is failed	Number of packets discarded due to authentication failures.
wrong length	Number of packets discarded due to incorrect length.
replay packet	Number of packets discarded due to duplication.
too long packet	Number of packets discarded due to excessive length.
invalid SA	Number of packets discarded due to invalid SAs.
policy deny	Number of packets discarded due to policy denial.
the normal packet statistics	Statistics about normal packets.
the security packet statistics	Statistics about security packets.
SPU board slot	SPU board information on the corresponding slot.
SPU board slot 1 information	Statistics about the SPU in slot 1.