Diagnostic Commands
Chapter 5. Troubleshooting
57
Example
ops>
show ipSec aesSupport
ops> AES is not supported
View Discarded Packets
The
show ipSec discards
command displays a summary of the number of
discarded and aborted packets. To obtain the reason for the discards, use the
all
attribute. For each discarded packet, the message text provides an error code and
suggests action. There are 32 possible reasons for discarding a packet.
When this command is issued, it displays data accumulated since the session was
initiated or the last time the command was issued in the session, whichever
ocurred later.
Syntax
show ipSec discards [all]
Example
admin
>
show ipSec discards all
6 packets (<0.001% of total packets) were dropped because NPU was
in discard mode.
– Discard mode is currently OFF
304 packets (0.0135% of total packets) were dropped: CODE 29.
– It is assumed that IKE is being initiated for this connection.
– Packets are dropped until the IKE negotiation finishes.
– This is normal operation.
View IPSec Encryption Statistics
The
show
ipSec encryption statistics
command indicates whether packets are
being dropped by the HA4000 gateway during the encryption/decryption process.
The command displays the number of packets the HA4000 attempts to encrypt
and decrypt, and the number successfully processed. When the system is
functioning optimally, the attempted and completed numbers are the same. When
these two numbers are not the same, the difference is the number of discarded
packets.
Syntax
show ipSec encryption statistics
Example
admin>
show ipSec encryption statistics
Encryption Statistics:
Traffic direction Packets
Inbound (decryption attempted) 1452
Inbound (decryption completed) 1450
Outbound (encryption attempted) 1655
Outbound (encryption completed) 1655
