Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...


==================================================================================

root@vSRX1> show security ipsec security-associations
Total active tunnels: 1
ID Algorithm SPI Life:sec/kb Mon lsys Port Gateway
<131073 ESP:aes-cbc-128/sha1 c016fe6c 3111/ unlim U root 500 1.2.3.22
>131073 ESP:aes-cbc-128/sha1 cc33a2c0 3111/ unlim U root 500 1.2.3.22


root@vSRX1> show security ipsec security-associations detail
ID: 131073 Virtual-system: root, VPN Name: IPSEC-VPN
Local Gateway: 1.2.3.21, Remote Gateway: 1.2.3.22
Local Identity: ipv4_subnet(any:0,[0..7]=0.0.0.0/0)
Remote Identity: ipv4_subnet(any:0,[0..7]=0.0.0.0/0)
Version: IKEv1
DF-bit: clear
Bind-interface: st0.1

...


Show security statistics:
root@vSRX1> show security ipsec statistics
ESP Statistics:
Encrypted bytes: 209552
Decrypted bytes: 115440
Encrypted packets: 1382
Decrypted packets: 1375
AH Statistics:
Input bytes: 0
Output bytes: 0
Input packets: 0
Output packets: 0
Errors:
AH authentication failures: 0, Replay errors: 0
ESP authentication failures: 0, ESP decryption failures: 0
Bad headers: 0, Bad trailers: 0


Monitor the interface:

root@vSRX1> monitor interface st0.1

vSRX1 Seconds: 2290 Time: 12:57:20
Delay: 0/0/3
Interface: st0.1, Enabled, Link is Up
Flags: Point-To-Point SNMP-Traps
Encapsulation: Secure-Tunnel
Local statistics: Current delta
Input bytes: 49560 [19236]
Output bytes: 0 [0]
Input packets: 590 [229]
Output packets: 0 [0]
Remote statistics:
Input bytes: 41648 (328 bps) [17172]
Output bytes: 15912 (0 bps) [7056]
Input packets: 777 (0 pps) [313]
Output packets: 194 (0 pps) [84]
Traffic statistics: Input bytes: 9120, [36408]
Input bytes: 64032 [9232]