show ipsec statistics gigabitethernet

Display statististics for Internet Protocol Security (IPsec) for an Ethernet interface.

Syntax

Command Parameters

gigabitethernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

Identifies the slot and port in one of the following formats:

  • a single slot and port (slot/port)

  • a range of slots and ports (slot/port-slot/port)

  • a series of slots and ports (slot/port,slot/port,slot/port)

  • all ports on the same slot (slot/all)

  • all ports on the switch (all)

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

Default

None

Command Mode

User EXEC

Command Output

The show ipsec statistics gigabitethernet command displays the following information:

Output field

Description

Ifindex

Specifies the interface.

InSuccesses

Specifies the number of ingress packets IPsec successfully carries.

InSPViolations

Specifies the number of ingress packets IPsec discards since boot time because of a security policy violation.

InNotEnoughMemories

Specifies the number of ingress packets IPsec discards since boot time because not enough memory is available.

InAHESPReplays

Specifies the number of ingress packets IPsec discards since boot time because the encapsulating security payload (ESP) replay check fails.

InAHFailures

Specifies the number of ingress packets IPsec discards since boot time because the AH authentication check fails.

InESPFailures

Specifies the number of ingress packets IPsec discards since boot time because the ESP authentication check fails.

OutSuccesses

Specifies the number of egress packets IPsec successfully carries since boot time.

OutSPViolations

Specifies the number of egress packets IPsec discards since boot time because a security policy violation occurs.

OutNotEnoughMemories

Specifies the number of egress packets IPsec discards since boot time because not enough memory is available since boot time.

generalError

Specifies a general error.