DES/3DES/AES VPN Encryption Module (AIM-VPN/EPII, AIM-VPN/HPII, AIM-VPN/BPII Family)
show crypto engine accelerator statistic
16
Cisco IOS Release 12.3(7)T
bytes before decrypt
Total number of bytes in packets to be decrypted including encryption
headers/trailers.
—
bytes after encrypt
Total number of bytes in encrypted packets including encryption
headers/trailers.
—
Kbits/sec decrypted
Kilobits per second of payload bytes decrypted.
—
Kbits/sec encrypted
Kilobits per second of payload bytes encrypted.
—
rx_no_endp
Not used in Cisco 2600/3600 VPN.
—
rx_hi_discards
Number of packets discarded by the VPN Module. This can happen if a
callback value is set, the output interface is NULL, or a packet has been
received when the VPN Module is disabled.
1400 encryption
not ready
fw_failure
—
4097 fatal firmware
error
invalie_sa
—
4165 invalid sa
invalid_flow
Packet received for encryption decryption using an IPsec key that is invalid,
for example, a session has expired or key is out of range.
4098 bad flow
cgx_errors
Not used in Cisco 2600/3600 VPN.
—
fw_qs_filled
Not used in Cisco 2600/3600 VPN.
4103 queue full
fw_resource_lock
Flow was deleted by IPSEC while VPN Module was processing the packet,
or packet has a NULL Local Address, or packet does not have room for
encapsulation headers
4104 resource
swamp
lotx_full_err
Not used in Cisco 2600/3600 VPN.
4354 null ip
null_ip_error
Not used in Cisco 2600/3600 VPN.
—
pad_size_error
Unable to remove pad bytes in packet.
4612 pad size error
out_bound_dh_acc
An out-of-bounds DH index was encountered during processing of the
packet.
4161 bad dh index
esp_auth_fail
Digest in an ESP Encapsulated packet is incorrect.
4609 ESP
authentication fail
ah_auth_failure
Digest in an AH Encapsulated packet is incorrect.
4610 AH
authentication fail
crypto_pad_error
Encryption coprocessor found a padding error.
4611 crypto pad
error
ah_prot_absent
The SPI in the ESP header of a packet does not match the SPI in the packet’s
flow.
4615 AH protocol
absent
ah_seq_failure
The AH sequence check failed.
4612 AH Sequence
fail
ah_spi_failure
The sequence number in the AH Header does not match the packets flow.
4613 AH SPI fail
esp_prot_absent
—
4617 ESP protocol
absent
Table 4
show crypto engine accelerator statistic Compression Statistics Descriptions for a Cisco 2600, Cisco 3600 or
Cisco 3700 VPN module
Count Label
Significance
Associated Error
Number
