Contents

Crypto engine commands· 1

display crypto-engine· 1

display crypto-engine statistics· 1

reset crypto-engine statistics· 2

Crypto engine commands

display crypto-engine

Use display crypto-engine to display crypto engine information, including the crypto engine name and supported algorithms.

Syntax

display crypto-engine

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display crypto engine information.

<Sysname> display crypto-engine

  Crypto engine name: Software crypto engine

  Crypto engine state: Enabled

  Crypto engine type: Software

  Slot ID: 1

  Crypto engine ID: 0

  Symmetric algorithms: des-cbc 3des-cbc aes-cbc md5 sha1 md5-hmac sha1-hmac

  Asymmetric algorithms:

  Random number generation function: Supported

Table 1 Command output

Field	Description
Crypto engine name	This field displays Software crypto engine for a software crypto engine.
Crypto engine state	The state is always Enabled for a software crypto engine.
Crypto engine type	The value is Software in the current software version.
Slot ID	ID of the IRF member device that holds the crypto engine.
Symmetric algorithms	Supported symmetric algorithms.
Asymmetric algorithms	Supported asymmetric algorithms.
Random number generation function	Whether random number generation function is supported: ·     Supported. ·     Not supported.

 

display crypto-engine statistics

Use display crypto-engine statistics to display crypto engines statistics, including the number of established sessions and the number of operations processed by crypto engines.

Syntax

display crypto-engine statistics [ engine-id engine-id slot slot-number ]

Views

Any view

Predefined user roles

network-admin

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The switch supports only one software crypto engine, and the engine ID can only be 0.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command displays statistics for the crypto engines on all member devices.

Examples

# Display all crypto engine statistics.

<Sysname> display crypto-engine statistics

  Submitted sessions: 0

  Failed sessions: 0

  Symmetric operations: 0

  Symmetric errors: 0

  Asymmetric operations: 0

  Asymmetric errors: 0

  Get-random operations: 0

  Get-random errors: 0

Table 2 Command output

Field	Description
Submitted sessions	Number of established sessions.
Failed sessions	Number of failed sessions.
Symmetric operations	Number of operations using symmetric algorithms.
Symmetric errors	Number of failed operations using symmetric algorithms.
Asymmetric operations	Number of operations using asymmetric algorithms.
Asymmetric errors	Number of failed operations using asymmetric algorithms.
Get-random operations	Number of operations for obtaining random numbers.
Get-random errors	Number of failed operations for obtaining random numbers.

 

Related commands

reset crypto-engine statistics

reset crypto-engine statistics

Use reset crypto-engine statistics to clear crypto engine statistics.

Syntax

reset crypto-engine statistics [ engine-id engine-id slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The switch supports only one software crypto engine, and the engine ID can only be 0.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify this option, the command clears statistics for the crypto engines on all member devices.

Examples

# Clear all crypto engine statistics.

<Sysname> reset crypto-engine statistics

Related commands

display crypto-engine statistics