display ipsec sa-expire statistics

Function

The display ipsec sa-expire statistics command displays the SA expiry information statistics.

This command is supported only on the NetEngine 8000 F1A.

Format

display ipsec sa-expire statistics

display ipsec sa-expire statistics [ slot slot-number [ engine engine-id | card card-id ] ]

Parameters

Parameter	Description	Value
slot slot-number	Indicates the slot ID.	The value is a string of 1 to 31 case-sensitive characters, spaces not supported.
engine engine-id	Indicates the engine ID.	Integer. You can select according to the prompt information of the device after typing "?".
card card-id	Indicates the card ID.	Integer. You can select according to the prompt information of the device after typing "?". If the prompt message is displayed as NULL, it means that there are no parts available.

Parameter

Description

Value

slot slot-number

Indicates the slot ID.

The value is a string of 1 to 31 case-sensitive characters, spaces not supported.

engine engine-id

Indicates the engine ID.

Integer. You can select according to the prompt information of the device after typing "?".

card card-id

Indicates the card ID.

Integer. You can select according to the prompt information of the device after typing "?". If the prompt message is displayed as NULL, it means that there are no parts available.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
ike	read

Usage Guidelines

You can view the SA expiry status of IKE packets sent to IPSec.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display the SA expiry status.

<HUAWEI> display ipsec sa-expire statistics

  SPU board slot 1 information:
---------------------------------------
 70 percent soft expire sent    : 0
 80 percent soft expire sent    : 0
 90 percent soft expire sent    : 0
 Hard expire sent               : 0
 Acquire SA sent                : 0
 SA fill entry receive          : 0
 SA add receive                 : 0
 SA delete receive              : 0
 Get c-alg fail                 : 0
---------------------------------------

**Table 1** Description of the **display ipsec sa-expire statistics** command output
Item	Description
SPU board slot 1 information	SPU board information on the corresponding slot.
70 percent soft expire sent	Indicates the number of times 70 percent of soft expire sent.
80 percent soft expire sent	Indicates the number of times 80 percent of soft expire sent.
90 percent soft expire sent	Indicates the number of times 90 percent of soft expire sent.
Hard expire sent	Indicates the number of times hard expire message sent.
Acquire SA sent	Indicates the number of times acquire SA message sent.
SA fill entry receive	Indicates number of times SA fill entry message received.
SA add receive	Indicates number of times SA add message received.
SA delete receive	Indicates number of times SA delete message received.
Get c-alg fail	Indicates number of times Get crypto failed.