Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show security group-vpn member ipsec statistics

Syntax

Description

Show IPsec statistics. Group VPNv2 is supported on SRX300, SRX320, SRX340, SRX345, SRX550HM, SRX1500, SRX4100, SRX4200, and SRX4600 devices and vSRX instances.

Options

none

Display information for all IPsec SAs.

index index

(Optional) Display detailed information about the specified SA, identified by index number. To obtain a list of all SAs that includes their index numbers, use the command with no options.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security group-vpn member ipsec statistics command. Output fields are listed in the approximate order in which they appear.

Table 1: show security group-vpn member ipsec statistics Output Fields

Field Name

Field Description

ESP Statistics

Numbers of encrypted and decrypted bytes and encrypted and decrypted packets.

AH Statistics

Numbers of input and output bytes and input and output packets.

Errors

Numbers of AH failures, replay errors, ESP authentication failures, ESP decryption failures, bad headers, and bad trailers.

D3P Statistics

Numbers of old timestamp packets, new timestamp packets, no timestamp packets, unexpected D3P header packets, invalid type packets, invalid length packets, and invalid next header packets.

Exclude Statistics

Numbers of created and invalidated sessions.

Dynamic Policy Statistics

Numbers of created and invalidated sessions.

Fail-Open Statistics

Numbers of created and invalidated sessions.

Fail-Close Statistics

Number of dropped packets.

Forward-policy-mismatch Statistics

Number of bypassed packets.

Sample Output

show security group-vpn member ipsec statistics

Release Information

Command introduced in Junos OS Release 15.1X49-D30.

Command introduced in Junos OS Release 18.2R1 for MX-series.