display ike statistics

Function

The display ike statistics command displays the statistics information of IKE packets.

This command is supported only on the NetEngine 8000 F1A.

Format

display ike statistics { all | msg | v2 } [ slot slot-number ]

Parameters

Parameter	Description	Value
all	Displays the statistics information of all IKE packets.	-
msg	Displays the statistics information of IKE messages.	-
v2	Displays the statistics information of IKEv2 packets.	-
slot slot-number	Displays the statistics information in an specified slot.	The value is a string of 1 to 32 case-sensitive characters, spaces not supported.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
ike	read

Usage Guidelines

The output of the display ike statistics command provides the following information:

Number of the input and output IKE packets
Number of the input and output IKE bytes
Number of discarded packets and detailed description of discarded packets

Example

The actual command output varies according to the device. The command output here is only an example.

# Display statistics of IKE packets.

<HUAWEI> display ike statistics msg

----------------------------------------------------------
 IKE message statistics information
 IKE message received                           : 9584
 IKE message sent                               : 9632
 IKEv2 IKE SA rekey success                     : 5
 IKEv2 child SA rekey success                   : 4272
 IKEv2 IKE SA rekey timeout                     : 0
 IKEv2 child SA rekey timeout                   : 5
 IKEv2 authenticate exchange timeout            : 0
 IKEv2 re-authenticate initiate                 : 0
 IKEv2 re-authenticate success                  : 0
 IKEv2 drop re-authenticate invalid SA          : 0
 IKEv2 drop re-authenticate no child            : 0
 IKEv2 hard re-authenticate                     : 0
 Remote auth method mismatch                    : 0
 IKE expire received                            : 0
 IKE acquire received                           : 1
 IKE acquire dropped                            : 0
 IKE expire dropped                             : 0
 IKE replace received                           : 0
---------------------------------------------------------

**Table 1** Description of the **display ike statistics** command output
Item	Description
IKE message statistics information	Indicates statistics of IKE messages.
IKE message received	Indicates the number of IKE message received.
IKE message sent	Indicates the number of IKE message sent.
IKE expire received	Indicates the number of IKE expiry received.
IKE acquire received	Indicates the number of IKE acquire received.
IKE acquire dropped	Indicates the number of IKE acquire dropped.
IKE expire dropped	Indicates the number of IKE expiry dropped.
IKE replace received	Indicates the number of IKE replace received.
IKEv2 IKE SA rekey success	Indicates the number of IKE version 2 SA rekey success.
IKEv2 child SA rekey success	Indicates the number of IKE version 2 child SA rekey success.
IKEv2 IKE SA rekey timeout	Indicates the number of IKE version 2 SA rekey timeout.
IKEv2 child SA rekey timeout	Indicates the number of IKE version 2 child SA rekey timeout.
IKEv2 authenticate exchange timeout	Indicates the number of IKE version 2 authenticate exchange timeout.
IKEv2 re-authenticate initiate	Indicates the number of IKE version 2 re-authentication initiated.
IKEv2 re-authenticate success	Indicates the number of IKE version 2 re-authentication success.
IKEv2 drop re-authenticate invalid SA	Indicates the number of IKE version 2 drop re-authenticate due to invalid SA.
IKEv2 drop re-authenticate no child	Indicates the number of IKE version 2 drop re-authenticate due to no child SA.
IKEv2 hard re-authenticate	Indicates the number of IKE version 2 hard re-authentication.
Remote auth method mismatch	Indicates the number of remote authentication method mismatch.