<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Arial",sans-serif;
mso-fareast-language:EN-US;}
h1
{mso-style-priority:9;
mso-style-link:"Título 1 Car";
margin-top:6.0pt;
margin-right:0cm;
margin-bottom:6.0pt;
margin-left:0cm;
page-break-after:avoid;
font-size:16.0pt;
font-family:"Arial",sans-serif;
color:#002060;
letter-spacing:1.0pt;
mso-fareast-language:EN-US;}
h2
{mso-style-priority:9;
mso-style-link:"Título 2 Car";
margin-top:6.0pt;
margin-right:0cm;
margin-bottom:6.0pt;
margin-left:0cm;
page-break-after:avoid;
font-size:14.0pt;
font-family:"Arial",sans-serif;
color:#943634;
letter-spacing:1.0pt;
mso-fareast-language:EN-US;}
h3
{mso-style-priority:9;
mso-style-link:"Título 3 Car";
margin-top:10.0pt;
margin-right:0cm;
margin-bottom:0cm;
margin-left:0cm;
margin-bottom:.0001pt;
page-break-after:avoid;
font-size:12.0pt;
font-family:"Arial",sans-serif;
color:#365F91;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoNoSpacing, li.MsoNoSpacing, div.MsoNoSpacing
{mso-style-priority:1;
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:Consolas;
mso-fareast-language:ES;}
p.MsoQuote, li.MsoQuote, div.MsoQuote
{mso-style-priority:29;
mso-style-link:"Cita Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Arial",sans-serif;
color:gray;
mso-fareast-language:EN-US;
font-style:italic;}
span.Ttulo1Car
{mso-style-name:"Título 1 Car";
mso-style-priority:9;
mso-style-link:"Título 1";
font-family:"Arial",sans-serif;
color:#002060;
letter-spacing:1.0pt;
font-weight:bold;}
span.Ttulo2Car
{mso-style-name:"Título 2 Car";
mso-style-priority:9;
mso-style-link:"Título 2";
font-family:"Arial",sans-serif;
color:#943634;
letter-spacing:1.0pt;
font-weight:bold;}
span.Ttulo3Car
{mso-style-name:"Título 3 Car";
mso-style-priority:9;
mso-style-link:"Título 3";
font-family:"Arial",sans-serif;
color:#365F91;
font-weight:bold;}
span.CitaCar
{mso-style-name:"Cita Car";
mso-style-priority:29;
mso-style-link:Cita;
font-family:"Arial",sans-serif;
color:gray;
font-style:italic;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EstiloCorreo25
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EstiloCorreo26
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EstiloCorreo27
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:886603673;
mso-list-type:hybrid;
mso-list-template-ids:-1133617598 612034182 201981955 201981957 201981953 201981955 201981957 201981953 201981955 201981957;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:1866672357;
mso-list-type:hybrid;
mso-list-template-ids:-2018221036 -627303464 201981955 201981957 201981953 201981955 201981957 201981953 201981955 201981957;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:18.0pt;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ES-AR link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Si Pablo. elegi mal la captura. Gracias. <o:p></o:p></span></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>No tengo tantos drops. Sin embargo pierdo paquetes por el tunel. un 30% aprox. <o:p></o:p></span></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Pero no estoy usando encriptación. Solo AH. por eso los decrypted estan en 0. Eso creo…<o:p></o:p></span></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNoSpacing>RVPN1DC#<o:p></o:p></p><p class=MsoNoSpacing>RVPN1DC#show crypto tech-support peer 20.11.17.23 | <span lang=EN-US>include drop<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4425826/811<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 16906 drop 11 life (KB/Sec) 4425607/811<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4532615/1090<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 13495 drop 7 life (KB/Sec) 4532477/1090<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4499595/2920<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 9 drop 3 life (KB/Sec) 4499594/2920<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4402315/1091<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 128 drop 3 life (KB/Sec) 4402313/1091<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4398244/2742<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 157 drop 2 life (KB/Sec) 4398244/2742<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4378136/1339<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 9397 drop 3 life (KB/Sec) 4378005/1339<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 4391117/964<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 15415 drop 6 life (KB/Sec) 4390974/964<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 413 drop 0 life (KB/Sec) 4439503/1287<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 91 drop 0 life (KB/Sec) 4439506/1287<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Inbound: #pkts dec'ed 656339 drop 0 life (KB/Sec) 4512220/864<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US> Outbound: #pkts enc'ed 596769 drop 226 life (KB/Sec) 4513134/864<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal>Este comando lo entendes? <o:p></o:p></p><p class=MsoNormal>Es de un cisco 1841. Se puede subir la cantidad de sesiones maximas de IPsec?<o:p></o:p></p><p class=MsoNoSpacing><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span style='mso-fareast-language:EN-US'>RVPN1DC#show crypto eli<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'>Hardware Encryption : ACTIVE<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'> Number of hardware crypto engines = 1<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'> CryptoEngine FPGA details: state = Active<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'> Capability : IPPCP, DES, 3DES, AES, IPv6, GDOI, FAILCLOSE<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'> <span style='background:yellow;mso-highlight:yellow'>IPSec-Session : 130 active, 300 max, 0 failed</span><o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'>RVPN1DC#<o:p></o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNoSpacing><span lang=EN-US style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><a name="_MailEndCompose"><span lang=EN-US style='font-size:14.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></a></p><span style='mso-bookmark:_MailEndCompose'></span><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=ES style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:ES-AR'>De:</span></b><span lang=ES style='font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-language:ES-AR'> lista-bounces@arnog.com.ar [mailto:lista-bounces@arnog.com.ar] <b>En nombre de </b>Pablo Fritz<br><b>Enviado el:</b> lunes, 5 de marzo de 2018 10:08 a.m.<br><b>Para:</b> lista@arnog.com.ar<br><b>Asunto:</b> Re: [Lista ArNOG] show crypto session detail<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Donde ves drops? Lo pintado dice 900 paquetes encriptados/desencriptados, 0 drops.<span style='font-family:"Times New Roman",serif;mso-fareast-language:ES-AR'><o:p></o:p></span></p><div><p class=MsoNormal style='margin-bottom:12.0pt'>Pablo<o:p></o:p></p><div id=AppleMailSignature><p class=MsoNormal>Sent from my <span class=apple-style-span>Phone</span><o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>El 4 mar. 2018, a la(s) 08:47, Fernando R. Soto <<a href="mailto:fsoto@fi.uba.ar">fsoto@fi.uba.ar</a>> escribió:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif'>Estimados, buen dia.</span><o:p></o:p></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif'>Algún especialista en vpn ipsec?</span><o:p></o:p></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif'>Que le pueda consultar a que puede deberse estos drops.</span><o:p></o:p></p><p class=MsoNormal><span lang=ES style='font-size:14.0pt;font-family:"Calibri",sans-serif'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>RVPN1DC#show crypto session detail</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Crypto session current status</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Code: C - IKE Configuration mode, D - Dead Peer Detection</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>K - Keepalives, N - NAT-traversal, T - cTCP encapsulation</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>X - IKE Extended Authentication, F - IKE Fragmentation</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Interface: FastEthernet0/1</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Uptime: 1w2d</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Session status: UP-ACTIVE</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'>Peer: 20.11.13.13 port 500 fvrf: (none) ivrf: (none)</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> Phase1_id: 20.11.13.13</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> Desc: (none)</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> IKE SA: local 20.11.12.15/500 remote 20.11.13.13/500 Active</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> Capabilities:(none) connid:1259 lifetime:09:02:27</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> </span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> IPSEC FLOW: permit ip host 20.8.9.1 host 20.11.13.1</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> Active SAs: 2, origin: crypto map</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas'> <span style='background:yellow;mso-highlight:yellow'>Inbound: <span style='color:red'>#pkts dec'ed 992</span> drop 0 life (KB/Sec) 4464777/1337</span></span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:Consolas;background:yellow;mso-highlight:yellow'> Outbound: <span style='color:red'>#pkts enc'ed 913</span> drop 0 life (KB/Sec) 4464895/1337</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US> </span><o:p></o:p></p></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span style='font-family:"Times New Roman",serif;mso-fareast-language:ES-AR'>_______________________________________________<br>Lista mailing list<br><a href="mailto:Lista@arnog.com.ar">Lista@arnog.com.ar</a><br><a href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a><o:p></o:p></span></p></div></blockquote></div></div></body></html>