[Lista ArNOG] show crypto session detail

[Pablo Fritz]

Donde ves drops? Lo pintado dice 900 paquetes encriptados/desencriptados, 0 drops.
Pablo

Sent from my Phone

El 4 mar. 2018, a la(s) 08:47, Fernando R. Soto <fsoto en fi.uba.ar> escribió:

> Estimados, buen dia.
>  
> Algún especialista en vpn ipsec?
> Que le pueda consultar a que puede deberse estos drops.
>  
> RVPN1DC#show crypto session detail
> Crypto session current status
>  
> Code: C - IKE Configuration mode, D - Dead Peer Detection
> K - Keepalives, N - NAT-traversal, T - cTCP encapsulation
> X - IKE Extended Authentication, F - IKE Fragmentation
>  
> Interface: FastEthernet0/1
> Uptime: 1w2d
> Session status: UP-ACTIVE
> Peer: 20.11.13.13 port 500 fvrf: (none) ivrf: (none)
>       Phase1_id: 20.11.13.13
>       Desc: (none)
>   IKE SA: local 20.11.12.15/500 remote 20.11.13.13/500 Active
>           Capabilities:(none) connid:1259 lifetime:09:02:27
>  
>   IPSEC FLOW: permit ip host 20.8.9.1 host 20.11.13.1
>         Active SAs: 2, origin: crypto map
>         Inbound:  #pkts dec'ed 992 drop 0 life (KB/Sec) 4464777/1337
>         Outbound: #pkts enc'ed 913 drop 0 life (KB/Sec) 4464895/1337
>  
> _______________________________________________
> Lista mailing list
> Lista en arnog.com.ar
> http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/lista/attachments/20180305/6a066bea/attachment.html>