show ipsec statistics vlan

Display statististics for Internet Protocol Security (IPsec) for an VLAN interface.

Syntax

Command Parameters

vlan <1-4059>

Specifies the VLAN ID in the range of 1 to 4059. By default, VLAN IDs 1 to 4059 are configurable and the system reserves VLAN IDs 4060 to 4094 for internal use. On switches that support the vrf-scaling and spbm-config-mode boot configuration flags, if you enable these flags, the system also reserves VLAN IDs 3500 to 3998. VLAN ID 1 is the default VLAN and you cannot create or delete VLAN ID 1.

Default

None

Command Mode

User EXEC

Command Output

The show ipsec statistics vlan command displays the following information:

Output field

Description

Ifindex

Specifies the interface.

InSuccesses

Specifies the number of ingress packets IPsec successfully carries.

InSPViolations

Specifies the number of ingress packets IPsec discards since boot time because of a security policy violation.

InNotEnoughMemories

Specifies the number of ingress packets IPsec discards since boot time because not enough memory is available.

InAHESPReplays

Specifies the number of ingress packets IPsec discards since boot time because the encapsulating security payload (ESP) replay check fails.

InAHFailures

Specifies the number of ingress packets IPsec discards since boot time because the AH authentication check fails.

InESPFailures

Specifies the number of ingress packets IPsec discards since boot time because the ESP authentication check fails.

OutSuccesses

Specifies the number of egress packets IPsec successfully carries since boot time.

OutSPViolations

Specifies the number of egress packets IPsec discards since boot time because a security policy violation occurs.

OutNotEnoughMemories

Specifies the number of egress packets IPsec discards since boot time because not enough memory is available since boot time.

generalError

Specifies a general error.