Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet
9-7
思科 ASA 系列命令参考，S 命令
第 9 章 show isakmp ipsec-over-tcp stats 至 show mroute 命令
show isakmp stats
•
Out Drop Packets（输出丢弃数据包数）- cikePhase1GWOutDropPkts
•
Out Notifys（输出通知数）- cikePhase1GWOutNotifys
•
Out P2 Exchanges（输出 P2 交换数）- cikePhase1GWOutP2Exchgs
•
Out P2 Exchange Invalids（输出 P2 交换无效次数）- cikePhase1GWOutP2ExchgInvalids
•
Out P2 Exchange Rejects（输出 P2 交换拒绝次数）- cikePhase1GWOutP2ExchgRejects
•
Out P2 Sa Delete Requests（输出 P2 Sa 删除请求数）- cikePhase1GWOutP2SaDelRequests
•
Initiator Tunnels（发起方隧道数）- cikePhase1GWInitTunnels
•
Initiator Fails（发起方失败次数）- cikePhase1GWInitTunnelFails
•
Responder Fails（响应方失败次数）- cikePhase1GWRespTunnelFails
•
System Capacity Fails（系统容量故障次数）- cikePhase1GWSysCapFails
•
Auth Fails（验证失败次数）- cikePhase1GWAuthFails
•
Decrypt Fails（解密失败次数）- cikePhase1GWDecryptFails
•
Hash Valid Fails（哈希有效失败次数）- cikePhase1GWHashValidFails
•
No Sa Fails（无 Sa 故障次数）- cikePhase1GWNoSaFails
此命令的输出包括以下字段：
•
Global IKE Statistics
•
Active Tunnels
•
In Octets
•
In Packets
•
In Drop Packets
•
In Notifys
•
In P2 Exchanges
•
In P2 Exchange Invalids
•
In P2 Exchange Rejects
•
In P2 Sa Delete Requests
•
Out Octets
•
Out Packets
•
Out Drop Packets
•
Out Notifys
•
Out P2 Exchanges
•
Out P2 Exchange Invalids
•
Out P2 Exchange Rejects
•
Out P2 Sa Delete Requests
•
Initiator Tunnels
•
Initiator Fails
•
Responder Fails
•
System Capacity Fails
•
Auth Fails