Nortel Networks 608(WL) - Manual (Page 167)

Chapter 5
Troubleshooting SpeedTouch™ IPSec
E-DOC-CTC-20051017-0169 v0.1 165
5.2 Via the CLI: Show command group
Show command group You can check whether the secure tunnels are up:
You can check whether traffic is passing the tunnel and keep track of the
number of packets and bytes. Therefore, take a snapshot of the number of
packets/bytes that hit an IPSec policy rule via following CLI command:
:IPSec show sadb
[ipsec]=>show
[ipsec show]=>stats
SNMP
=====
ikeGlobalStats
--------------
ikeGlobalActiveTunnels : 0
ikeGlobalPreviousTunnels : 0
ikeGlobalInOctets : 0
ikeGlobalInPackets : 0
ikeGlobalInDropPackets : 0
ikeGlobalInNotify : 0
ikeGlobalInP2Exchgs : 0
ikeGlobalInP2ExchgsInvalids : 0
ikeGlobalInP2ExchgsRejects : 0
ikeGlobalInP2SaDelRequests : 0
ikeGlobalOutOctets : 0
ikeGlobalOutPackets : 0
ikeGlobalOutDropPackets : 0
ikeGlobalOutNotify : 0
ikeGlobalOutP2Exchgs : 0
ikeGlobalOutP2ExchgsInvalids : 0
ikeGlobalOutP2ExchgsRejects : 0
ikeGlobalOutP2SaDelRequests : 0
ikeGlobalInitTunnels : 0
ikeGlobalInitTunnelsFails : 0
ikeGlobalRespTunnelsFails : 0
ikeGlobalAuthFails : 0
ikeGlobalDecryptFails : 0
ikeGlobalHashValidFails : 0
ikeGlobalNoSaFails : 0
ikeGlobalRespTunnels : 0
ikeGlobalInXauthFailures : 0
ikeGlobalOutXauthFailures : 0
ikeGlobalInP1SaDelRequests : 0
ikeGlobalOutP1SaDelRequests : 0
ikeGlobalInConfigs : 0
ikeGlobalOutConfigs : 0
ikeGlobalInConfigsRejects : 0
ikeGlobalOutConfigsRejects : 0
ikeGlobalHcPreviousTunnels : 281483566645248
ikeGlobalPreviousTunnelsWraps : 0
...