Installation Guide

show ipsec stat:
device#show ipsec stat
IPSecurity Statistics
ipsecEspCurrentInboundSAs 1 ipsecEspTotalInboundSAs: 1
ipsecEspCurrentOutboundSA 1 ipsecEspTotalOutboundSAs: 1
IPSecurity Packet Statistics
ipsecEspTotalInPkts: 0 ipsecEspTotalInPktsDrop: 0
ipsecEspTotalOutPkts: 7
IPSecurity Error Statistics
ipsecAuthenticationErrors 0
ipsecReplayErrors: 0 ipsecPolicyErrors: 0
ipsecOtherReceiveErrors: 0 ipsecSendErrors: 0
ipsecUnknownSpiErrors: 0
show ikev2 statistics:
device#show ikev2 statistics
Total IKEv2 SA Count : 1 active: 1 negotiating: 0
Incoming IKEv2 Requests: 0 accepted: 0 rejected: 0
Outgoing IKEv2 Requests: 1 accepted: 1 rejected: 0
Rejected IKEv2 Requests: 0
Incoming IKEV2 Cookie Challenged Requests: 0
accepted: 0 rejected: 0 rejected no cookie: 0
IKEv2 Packet Statistics:
Total Packets Received : 57
Total Packets Transmitted : 57
Total Packets Retransmitted: 0
Total Keepalive Received : 10
Total Keepalive Transmitted: 10
IKEv2 Error Statistics:
Unsupported Payload : 0 Invalid IKE SPI : 0
Invalid Version : 0 Invalid Syntax : 0
Proposal Mismatch : 0 Invalid Selectors: 0
Authentication Failed : 0 Others : 0
MLX Series IKEv2 Clear Commands
IKEv2 clear commands include clear ikev2 sa, clear ipsec statistics, clear ike statistics, and clear ipsec sa.
IKEv2 Option Description
clear ikev2 sa { fvrf <vrf-name> }
{ [ local <ipaddress> ] | [ remote
<ip-address> ] }
Clear IKE security associations. When the user gives this command, the IKE SA will be deleted and re-established.
Each child SA is also re-established.
clear ipsec statistics Clears the IPsec statistics.
clear ike statistics Clears all IKE related stats.
clear ipsec sa [ fvrf <vrf-name> ]
[ peer <ip-address> ]
Clears IPsec SA. This command deletes and then creates the IPsec SA. The IKE SA will remain the same.
MLX-10GX4-IPSEC-M Forwarding
Card features for the MLX-10GX4-IPSEC-M include port to port line rate forwarding for all packet sizes, and line rate forwarding with
combinations of 1G, 10G, 100G and 40G ports.
The MLX-10GX4-IPSEC-M card is designed for the MLX Series chassis, and its features include the following:
• CAM1 and CAM3 interface parallel look-ups.
NOTE
Transparent to MLX-10GX4-IPSEC-M forwarding application.
MLX Series router modules
Extreme Routing MLX Series Hardware Installation Guide
56 9035627-01