[Lista ArNOG] show crypto session detail

[Fernando R. Soto]

Estimados, buen dia.

 

Algún especialista en vpn ipsec?

Que le pueda consultar a que puede deberse estos drops.

 

RVPN1DC#show crypto session detail

Crypto session current status

 

Code: C - IKE Configuration mode, D - Dead Peer Detection

K - Keepalives, N - NAT-traversal, T - cTCP encapsulation

X - IKE Extended Authentication, F - IKE Fragmentation

 

Interface: FastEthernet0/1

Uptime: 1w2d

Session status: UP-ACTIVE

Peer: 20.11.13.13 port 500 fvrf: (none) ivrf: (none)

      Phase1_id: 20.11.13.13

      Desc: (none)

  IKE SA: local 20.11.12.15/500 remote 20.11.13.13/500 Active

          Capabilities:(none) connid:1259 lifetime:09:02:27

  

  IPSEC FLOW: permit ip host 20.8.9.1 host 20.11.13.1

        Active SAs: 2, origin: crypto map

        Inbound:  #pkts dec'ed 992 drop 0 life (KB/Sec) 4464777/1337

        Outbound: #pkts enc'ed 913 drop 0 life (KB/Sec) 4464895/1337

 

------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/lista/attachments/20180304/29a75982/attachment.html>