Black Box ET0010A, Руководство пользователя CLI, Страница: 177 / 212

Command Reference
178 ETEP CLI User Guide
Usage Guidelines
When the policy-packet-count command is enabled, the ETEP adds a count to the security policy and
security association databases (SPD and SAD, respectively). The counters increment as packets use the
policies and SAs. The counts are displayed when you issue any of the following CLI commands:
show
spd, show sad, and show policy-packet count . By comparing the counters on each ETEP, you can
determine if the packets are being encrypted and sent from one ETEP, and then received at the other.
The policy packet counters are disabled by default. We recommend enabling the feature for
troubleshooting, and disabling it for normal operation.
To clear the counters, issue the show policy-packet-count-clear command.
Related topics:
●
“Determining the Cause of Dropped Packets” on page 112
●
“show” on page 187
Example
The following example enables the policy packet counters on the ETEP.
admin> configure
config> policies
policies> policy-packet-count enable
policy-priority
Description
The policy-priority command assigns a processing priority to a policy. This command is used in IPsec
policies on the ETEP management interface and local-site policies.
User Type
Administrator
Hierarchy Level
●
IPsec policy-config mode (config> management-interface > ipsec-config> policy-config)
●
local-site policy-config mode (config > policies > local-site-policies > policy-config)
Syntax
policy-priority {<priority>}
Attributes
priority -
For local-site policies the valid range is 65001–65500. For management port policies the
valid range is 1–65500.