show security group-vpn member ipsec statistics
Syntax
show security group-vpn member ipsec statistics <index index>
Description
Show IPsec statistics. Group VPNv2 is supported on SRX300, SRX320, SRX340, SRX345, SRX550HM, SRX1500, SRX4100, SRX4200, and SRX4600 Series Firewalls and vSRX Virtual Firewall instances.
Options
| none | Display information for all IPsec SAs. |
| index index | (Optional) Display detailed information about the specified SA, identified by index number. To obtain a list of all SAs that includes their index numbers, use the command with no options. |
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show security group-vpn
member ipsec statistics command. Output fields are listed in
the approximate order in which they appear.
Field Name |
Field Description |
|---|---|
ESP Statistics |
Numbers of encrypted and decrypted bytes and encrypted and decrypted packets. |
AH Statistics |
Numbers of input and output bytes and input and output packets. |
Errors |
Numbers of AH failures, replay errors, ESP authentication failures, ESP decryption failures, bad headers, and bad trailers. |
D3P Statistics |
Numbers of old timestamp packets, new timestamp packets, no timestamp packets, unexpected D3P header packets, invalid type packets, invalid length packets, and invalid next header packets. |
Exclude Statistics |
Numbers of created and invalidated sessions. |
Dynamic Policy Statistics |
Numbers of created and invalidated sessions. |
Fail-Open Statistics |
Numbers of created and invalidated sessions. |
Fail-Close Statistics |
Number of dropped packets. |
Forward-policy-mismatch Statistics |
Number of bypassed packets. |
Sample Output
show security group-vpn member ipsec statistics
user@host> show security group-vpn member ipsec statistics ESP Statistics: Encrypted bytes: 54712 Decrypted bytes: 16800 Encrypted packets: 381 Decrypted packets: 200 AH Statistics: Input bytes: 0 Output bytes: 0 Input packets: 0 Output packets: 0 Errors: AH authentication failures: 0, Replay errors: 0 ESP authentication failures: 0, ESP decryption failures: 0 Bad headers: 0, Bad trailers: 0 D3P Statistics: Old timestamp packets: 0 New timestamp packets: 0 No timestamp packets: 0 Unexpected D3P header packets: 0 Invalid type packets: 0 Invalid length packets: 0 Invalid next header packets: 0 Exclude Statistics: Created sessions: 0 Invalidated sessions: 0 Dynamic Policy Statistics: Created sessions: 381 Invalidated sessions: 0 Fail-Open Statistics: Created sessions: 0 Invalidated sessions: 0 Fail-Close Statistics: Dropped packets: 0 Forward-policy-mismatch Statistics: Input Packets: 0 Output packets: 0
Release Information
Command introduced in Junos OS Release 15.1X49-D30.
Command introduced in Junos OS Release 18.2R1 for MX-series.