HUAWEI USG6000E, USG6000, USG9500, and NGFW Module V500, V600 Troubleshooting Guide
Viewing VPN Status
Viewing IPSec Status
View IPSec status using the web UI:
- Choose .
- The IPSec tunnels being negotiated and already negotiated are displayed in the IPSec monitoring List. For each IPSec tunnel, the tunnel name, status, local address, peer address, algorithm, negotiated data flow, duration, and sending and receiving rates are displayed.
View IPSec status using the CLI:
- Run the display ike sa command, view IPSec tunnel status.
- Run the display ipsec sa command, view IPSec tunnel details.
- Run the display ipsec statistics command, view IPSec packet statistics.
Viewing L2TP Status
View L2TP status using the web UI:
- Choose .
- Click Refresh. You can view the following information about established L2TP tunnels.
Parameter
Description
Local Tunnel ID
Tunnel ID of the local device. The value must be the same as the Tunnel ID on Peer value of the peer device.
Peer Tunnel ID
Tunnel ID of the peer device. The value must be the same as the Tunnel ID on Local value of the peer device.
Local Address
Local IP address of the L2TP tunnel of the local device.
Peer Address
Peer IP address of the tunnel of the peer end.
Port
UDP port of the peer end of a tunnel. If the local end is a LAC, the UDP port of the peer end is 1701.
Number of Sessions
Number of sessions within the tunnel.
Peer Tunnel Name
Peer tunnel name.
Disconnect
Disconnects the tunnel manually.
- Click
of the L2TP tunnel to disconnect the tunnel and clear all control connections and session connections from the tunnel.
- Clicking
tears down all tunnels and clears all control and session connections on the tunnels.
- Click
View L2TP status using the CLI:
- Run the display l2tp tunnel command, view L2TP tunnel information.
- Run the display l2tp session command, view L2TP session information.
- Run the display l2tp statistics command, view L2TP packet statistics.
Viewing GRE Status
View GRE status using the web UI:
- Choose .
- Click Refresh to view GRE tunnel information.
Table 5-7 Parameters of GRE tunnel information
Parameter
Description
Received GRE Packets
Indicates that the following information is the statistics of received GRE packets.
Number of Received Packets
Number of the packets received over the GRE tunnel (Fragments of a packet are regarded as packets.)
Number of Received Bytes
Number of the bytes received over the GRE tunnel
Sum of Packets and Fragments
Total number of the packets received over the GRE tunnel (Fragments of a packet are regarded as packets.)
GRE Version Errors
Number of errors caused by incorrect version information
GRE Checksum Errors
Number of errors caused by incorrect GRE checksum and calculation
GRE Key Errors
Number of key inconsistency errors
Transmitted GRE Packets
Indicates that the following information is the statistics of transmitted GRE packets.
Number of Packets to Be Transmitted
Number of the packets to be transmitted over the GRE tunnel
Number of Bytes to Be Transmitted
Number of the bytes to be transmitted over the GRE tunnel
Number of Transmitted Error Packets
Number of the packets that fail to be sent
Packets Exceeded Recursion Limit
Number of errors caused by tunnel nesting
Number of Transmitted Packets
Number of the GRE packets that are properly transmitted