R3303-HP HSR6800 Routers Security Command Reference

282
Field Descri
p
tion
dropped security packet detail
Detailed information about inbound/outbound packets that get
dropped.
not enough memory Number of packets dropped due to lack of memory.
can't find SA Number of packets dropped due to finding no security association.
queue is full Number of packets dropped due to full queues.
authentication has failed Number of packets dropped due to authentication failure.
wrong length Number of packets dropped due to wrong packet length.
replay packet Number of packets replayed.
packet too long Number of packets dropped due to excessive packet length.
wrong SA Number of packets dropped due to improper SA.
decrypt/encrypt failed
Number of packets dropped due to decryption or encryption
failure.
ACL check failure Number of packets dropped due to ACL check failure.
Related commands
reset ipsec statistics
display ipsec transform-set
Use display ipsec transform-set to display information about IPsec transform sets.
Syntax
display ipsec transform-set [ transform-set-name ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
transform-set-name: Specifies the name of an IPsec transform set, a string of 1 to 32 characters. If you do
not specify an IPsec transform set, the command displays information about all IPsec transform sets.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Usage guidelines
If you do not specify any parameters, the command displays information about all IPsec transform sets.