View IPSec Statistics

Use the following procedure to clear Internet Protocol Security (IPSec) system statistics counters and view IPSec statistics on an interface. The device only clears system statistics counters on system reboot.

Procedure

To enter User EXEC mode, log on to the switch.
View IPSec statistics for the system:

show ipsec statistics system
View IPSec statistics for an Ethernet interface:

show ipsec statistics gigabitethernet {sub-port]][,...][slot/all][all]}
View IPSec statistics for a VLAN interface:

show ipsec statistics vlan <1–4059>
View statistics for IPSec on the loopback interface:

show ipsec statistics loopback <1–256>
Clear IPSec system statistics counters:

clear ipsec stats all

Example

View IPSec statistics. Output is partial due to length.

Switch:1>show ipsec statistics system

================================================================================
                            IPSEC Global Statistics
================================================================================
InSuccesses          = 0
InSPViolations       = 0
InNotEnoughMemories  = 0
InAHESPReplays       = 0
InAHFailures         = 0
InESPFailures        = 0
OutSuccesses         = 0
OutSPViolations      = 0
OutNotEnoughMemories = 0
generalError         = 0
InAHSuccesses        = 0
InESPSuccesses       = 0
OutAHSuccesses       = 0
OutESPSuccesses      = 0
OutKBytes            = 0
OutBytes             = 0
InKBytes             = 0
InBytes              = 0
--More-- (q = quit)

Switch:1>show ipsec statistics gigabitethernet 1/13

================================================================================
                              Ipsec  Port  Stats
================================================================================
Ifindex              = 204
InSuccesses          = 0
InSPViolations       = 0
InNotEnoughMemories  = 0
InAHESPReplays       = 0
InAHFailures         = 0
InESPFailures        = 0
OutSuccesses         = 0
OutSPViolations      = 0
OutNotEnoughMemories = 0
generalError         = 0

Switch:1>show ipsec statistics vlan 1

================================================================================
                               Ipsec  Vlan  Stats
================================================================================
Ifindex              = 2049
InSuccesses          = 0
InSPViolations       = 0
InNotEnoughMemories  = 0
InAHESPReplays       = 0
InAHFailures         = 0
InESPFailures        = 0
OutSuccesses         = 0
OutSPViolations      = 0
OutNotEnoughMemories = 0
generalError         = 0

View IPSec statistics for a loopback interface:

Switch:1>show ipsec statistics loopback 1

================================================================================
                             Ipsec  LoopBack  Stats

================================================================================
Ifindex              = 1344
InSuccesses          = 0
InSPViolations       = 0
InNotEnoughMemories  = 0
InAHESPReplays       = 0
InESPReplays         = 0
InAHFailures         = 0
InESPFailures        = 0
OutSuccesses         = 0
OutSPViolations      = 0
OutNotEnoughMemories = 0
generalError         = 0

Variable Definitions

Use the data in the following table to use the show ipsec statistics command.


Variable	Value
{slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}	Identifies the slot and port in one of the following formats: a single slot and port (slot/port) a range of slots and ports (slot/port-slot/port) a series of slots and ports (slot/port,slot/port,slot/port) all ports on the same slot (slot/all) all ports on the switch (all) If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
loopback `<1–256>`	Identifies the loopback interface.
system	Shows statistics for the entire system.
vlan `<1-4059>`	Specifies the VLAN.