This command accesses the show>group encryption context.
This command displays NGE information for a key group.
The following output is an example of encryption key group information, and Table 95 describes the fields.
Label | Description |
Encryption Keygroup Configuration Detail | |
Keygroup Id | The key group identifier |
Keygroup Name | The key group name |
Description | The key group description |
Authentication Algo | The authentication algorithm used for the key group |
Encryption Algo | The encryption algorithm used for the key group |
Active Outbound SA | The active outbound SA for the key group |
Activation Time | The date and time that the key group was activated |
Security Associations | |
Spi | The security parameter index for the SA in the key group |
Install Time | The date and time that the SA was installed in the key group |
Key CRC | The CRC for the key belonging to the SA |
Encryption Keygroup Forwarded Statistics | |
Encrypted Pkts | The number of encrypted packets forwarded by the key group |
Encrypted Bytes | The number of encrypted bytes forwarded by the key group |
Decrypted Pkts | The number of decrypted packets forwarded by the key group |
Decrypted Bytes | The number of decrypted bytes forwarded by the key group |
Encryption Keygroup Outbound Discarded Statistics (Pkts) | |
Total Discard | The total number of outbound packets discarded by the key group |
Unsupported Uplink | The total number of outbound packets discarded by the key group due to an unsupported uplink |
Enqueue Error | The total number of outbound packets discarded by the key group due to an enqueuing error |
Other | The total number of outbound packets discarded by the key group due to some other reason, such as an internal configuration error (for example, a key group that points to an SA, but the SA is not valid) |
Encryption Keygroup Inbound Discarded Statistics (Pkts) | |
Total Discard | The total number of inbound packets discarded by the key group |
Invalid Spi | The total number of inbound packets discarded by the key group due to an invalid SPI |
Authentication Failure * | The total number of inbound packets discarded by the key group due to an authorization failure |
Control Word Mismatch | The total number of inbound packets discarded by the key group due to a control word (CW) mismatch between the encrypted (protected) CW in the ESP payload and the CW that is not encrypted |
Padding Error | The total number of inbound packets discarded by the key group due to a padding error |
Enqueue Error | The total number of inbound packets discarded by the key group due to an enqueuing error |
Other | The total number of inbound packets discarded by the key group due to some other reason (for example, an incoming packet length is incorrect) |
SDP Keygroup Association Table | |
SDP ID | The SDP ID |
Direction | The direction in which key group authentication and encryption occurs for traffic on the SDP |
Inbound Keygroup SDP Association Count | The number of SDPs configured to use inbound SA |
Outbound Keygroup SDP Association Count | The number of SDPs configured to use outbound SA |
VPRN Keygroup Association Table | |
VPRN SVC ID | The VPRN service identifier |
Direction | The direction in which key group authentication and encryption occurs for traffic on the VPRN |
Inbound Keygroup VPRN Association Count | The number of VPRNs configured to use inbound SA |
Outbound Keygroup VPRN Association Count | The number of VPRNs configured to use outbound SA |
This command shows NGE summary information.
The following output is an example of NGE summary information, and Table 96 describes the fields.
Label | Description |
Group Encryption | |
Encryption Label | The unique network-wide group encryption label |
Encryption Keygroup | |
Id | The key group identifier value |
Name | The key group name |
Auth Algo | The authentication algorithm used by the key group |
Encr Algo | The encryption algorithm used by the key group |
Active OutSA | The active outbound SA for the key group |
No. of Encryption Keygroup | The number of encryption key groups currently configured on the node |
This command accesses the context to clear group encryption parameters.
This command clears NGE information for a key group.