HUAWEI USG6000E, USG6000, USG9500, and NGFW Module V500, V600 Troubleshooting Guide

Viewing VPN Status

Viewing VPN Status

Viewing IPSec Status

View IPSec status using the web UI:

  1. Choose Network > IPSec > Monitor.
  2. The IPSec tunnels being negotiated and already negotiated are displayed in the IPSec monitoring List. For each IPSec tunnel, the tunnel name, status, local address, peer address, algorithm, negotiated data flow, duration, and sending and receiving rates are displayed.

View IPSec status using the CLI:

  • Run the display ike sa command, view IPSec tunnel status.
  • Run the display ipsec sa command, view IPSec tunnel details.
  • Run the display ipsec statistics command, view IPSec packet statistics.

Viewing L2TP Status

View L2TP status using the web UI:

  1. Choose Network > L2TP > Monitor.
  2. Click Refresh. You can view the following information about established L2TP tunnels.

    Parameter

    Description

    Local Tunnel ID

    Tunnel ID of the local device. The value must be the same as the Tunnel ID on Peer value of the peer device.

    Peer Tunnel ID

    Tunnel ID of the peer device. The value must be the same as the Tunnel ID on Local value of the peer device.

    Local Address

    Local IP address of the L2TP tunnel of the local device.

    Peer Address

    Peer IP address of the tunnel of the peer end.

    Port

    UDP port of the peer end of a tunnel. If the local end is a LAC, the UDP port of the peer end is 1701.

    Number of Sessions

    Number of sessions within the tunnel.

    Peer Tunnel Name

    Peer tunnel name.

    Disconnect

    Disconnects the tunnel manually.

    • Click of the L2TP tunnel to disconnect the tunnel and clear all control connections and session connections from the tunnel.
    • Clicking tears down all tunnels and clears all control and session connections on the tunnels.

View L2TP status using the CLI:

  • Run the display l2tp tunnel command, view L2TP tunnel information.
  • Run the display l2tp session command, view L2TP session information.
  • Run the display l2tp statistics command, view L2TP packet statistics.

Viewing GRE Status

View GRE status using the web UI:

  1. Choose Network > GRE > Monitor.
  2. Click Refresh to view GRE tunnel information.
    Table 5-7 Parameters of GRE tunnel information

    Parameter

    Description

    Received GRE Packets

    Indicates that the following information is the statistics of received GRE packets.

    Number of Received Packets

    Number of the packets received over the GRE tunnel (Fragments of a packet are regarded as packets.)

    Number of Received Bytes

    Number of the bytes received over the GRE tunnel

    Sum of Packets and Fragments

    Total number of the packets received over the GRE tunnel (Fragments of a packet are regarded as packets.)

    GRE Version Errors

    Number of errors caused by incorrect version information

    GRE Checksum Errors

    Number of errors caused by incorrect GRE checksum and calculation

    GRE Key Errors

    Number of key inconsistency errors

    Transmitted GRE Packets

    Indicates that the following information is the statistics of transmitted GRE packets.

    Number of Packets to Be Transmitted

    Number of the packets to be transmitted over the GRE tunnel

    Number of Bytes to Be Transmitted

    Number of the bytes to be transmitted over the GRE tunnel

    Number of Transmitted Error Packets

    Number of the packets that fail to be sent

    Packets Exceeded Recursion Limit

    Number of errors caused by tunnel nesting

    Number of Transmitted Packets

    Number of the GRE packets that are properly transmitted

Translation
Favorite
Download
Update Date:2024-01-30
Document ID:EDOC1000179232
Views:1388716
Downloads:2718
Average rating:5.0Points

Digital Signature File

digtal sigature tool