Phase-2 sa delete requests sent, Initiated tunnels, Failed initiated tunnels – Cisco VPN 3002 User Manual

Page 207: Failed remote tunnels, Authentication failures, Decryption failures, Hash validation failures, System capability failures, No-sa failures

Advertising
background image

13-19

VPN 3002 Hardware Client Reference

OL-1893-01

Chapter 13 Monitoring

Monitoring | Statistics | IPSec

Phase-2 SA Delete Requests Sent

The cumulative total of requests to delete IPSec Phase-2 Security Associations sent by all currently and
previously active IKE tunnels.

Initiated Tunnels

The cumulative total of IKE tunnels that this VPN 3002 initiated.

Failed Initiated Tunnels

The cumulative total of IKE tunnels that this VPN 3002 initiated and that failed to activate.

Failed Remote Tunnels

The cumulative total of IKE tunnels that remote peers initiated and that failed to activate.

Authentication Failures

The cumulative total of authentication attempts that failed, by all currently and previously active IKE
tunnels. Authentication failures indicate problems with preshared keys, digital certificates, or user-level
authentication.

Decryption Failures

The cumulative total of decryptions that failed, by all currently and previously active IKE tunnels.

Hash Validation Failures

The cumulative total of hash validations that failed, by all currently and previously active IKE tunnels.
Hash validation failures usually indicate misconfiguration or mismatched preshared keys or digital
certificates.

System Capability Failures

The cumulative total of system capacity failures that occurred during processing of all currently and
previously active IKE tunnels. These failures indicate that the system has run out of memory, or that the
tunnel count exceeds the system maximum.

No-SA Failures

The cumulative total of nonexistent-Security Association failures that occurred during processing of all
currently and previously active IKE tunnels. These failures occur when the system receives a packet for
which it has no Security Association, and might indicate synchronization problems.

Advertising