[Contents] [Prev] [Next] [Index] [Report an Error]

show ipsec redundancy

Syntax



show ipsec redundancy (interface <es-fpc/pic/port> | security association
<sa-name>)

Release Information

Command introduced before JUNOS Release 7.4.

Description

(Encryption interface on M-series and T-series routing platforms only) Display information about IPSec redundancy.

Options

interface <es-fpc/pic/port> — Display information about all encryption interfaces, or optionally, about a particular encryption interface.

security association <sa-name> — Display information about all remote tunnels, or optionally, about a particular remote tunnel.

Required Privilege Level

view

List of Sample Output

show ipsec redundancy interface
show ipsec redundancy security-associations

Output Fields

Table 214 lists the output fields for the show ipsec redundancy command. Output fields are listed in the approximate order in which they appear.

Table 214: show ipsec redundancy Output Fields

Field Name	Field Description
Failure counter	Number of times a PIC switched between primary and backup interfaces, or the number of times the tunnel switched between the primary and remote peers since the software has been activated.
Primary interface '	Name of the interface configured to be the primary interface.
Backup interface	Name of the interface configured to be the backup interface.
State	State of the primary or backup interface can be Active, Offline, or Standby. Both ES PICs are initialized to Offline. For primary and remote peers, State can be Active or Standby. Both peers are in a state of Standby by default (there is not yet a connection between the two peers).
Security association	Name of the security association.
Local IP	Local IP address.
Primary remote IP	IP address of the configured primary remote peer.
Backup remote IP	IP address of the configured backup remote peer.

Sample Output

show ipsec redundancy interface

user@host> show ipsec redundancy interface

    Failure counter: 0 
    Primary interface: es-1/3/0, State: Active
    Backup interface : es-1/1/0, State: Standby

show ipsec redundancy security-associations

user@host> show ipsec redundancy security-associations
sa-dynamic

   Security association: sa-dynamic, Failure counter: 0
   Local IP: 4.4.4.4
   Primary remote IP: 4.4.4.5, State: Standby
   Backup remote IP : 3.3.3.3, State: Standby