Login
- Table of Contents
-
- 12-Security Command Reference
- 00-Preface
- 01-Security zone commands
- 02-AAA commands
- 03-Portal commands
- 04-User profile commands
- 05-Password control commands
- 06-Keychain commands
- 07-Public key management commands
- 08-PKI commands
- 09-IPsec commands
- 10-Group domain VPN commands
- 11-SSH commands
- 12-SSL commands
- 13-SSL VPN commands
- 14-ASPF commands
- 15-APR commands
- 16-mGRE commands
- 17-Session management commands
- 18-Connection limit commands
- 19-Object group commands
- 20-Object policy commands
- 21-Attack detection and prevention commands
- 22-ARP attack protection commands
- 23-uRPF commands
- 24-Crypto engine commands
- 25-FIPS commands
| Title | Size | Download |
|---|---|---|
| 24-Crypto engine commands | 70.16 KB |
Crypto engine commands
display crypto-engine
Use display crypto-engine to display crypto engine information.
Syntax
display crypto-engine
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
If the device does not have hardware crypto engines, this command displays information only about software crypto engines.
Examples
# Display crypto engine information.
<Sysname> display crypto-engine
Crypto engine name: MPC8548esec Crypto Engine
Crypto engine state: Enabled
Crypto engine type: Hardware
Slot ID: 0
CPU ID: 0
Crypto engine ID: 0
Crypto device name: H3C Hardware
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc 3des-ecb aes-cbc aes-ecb rc4 md5 sha1 sha2-256 md5-hmac sha1-hmac sha2-256-hmac
Asymmetric algorithms: dh-group1 dh-group2 dh-group5 dh-group14
Random number generation function: Supported
Crypto engine name: Software crypto engine
Crypto engine state: Enabled
Crypto engine type: Software
Slot ID: 0
CPU ID: 0
Crypto engine ID: 1
Crypto device name: Software
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac sm3 sm3-hmac sm4-cbc
Asymmetric algorithms:
Random number generation function: Supported
Crypto engine name: XLP432 Crypto Engine
Crypto engine state: Enabled
Crypto engine type: Hardware
Slot ID: 3
CPU ID: 0
Crypto engine ID: 0
Crypto device name: H3C Hardware
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc 3des-ecb aes-cbc aes-ecb camellia_cbc rc4 md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac
Asymmetric algorithms: dh-group1 dh-group2 dh-group5 dh-group14
Random number generation function: Supported
Crypto engine name: Software crypto engine
Crypto engine state: Enabled
Crypto engine type: Software
Slot ID: 3
CPU ID: 0
Crypto engine ID: 1
Crypto device name: Software
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac sm3 sm3-hmac sm4-cbc
Asymmetric algorithms:
Random number generation function: Supported
Crypto engine name: CN7809 Crypto Engine
Crypto engine state: Enabled
Crypto engine type: Hardware
Slot ID: 5
CPU ID: 0
Crypto engine ID: 0
Crypto device name: H3C CN7809SEC Hardware
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc 3des-ecb aes-cbc aes-ecb aes-ctr md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc-hmac
Asymmetric algorithms: dh-group1 dh-group2 dh-group5 dh-group14
Random number generation function: Supported
Crypto engine name: Software crypto engine
Crypto engine state: Enabled
Crypto engine type: Software
Slot ID: 5
CPU ID: 0
Crypto engine ID: 1
Crypto device name: Software
Crypto device serial number:
Symmetric algorithms: des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac sm3 sm3-hmac sm4-cbc
Asymmetric algorithms:
Random number generation function: Supported
Table 1 Command output
|
Field |
Description |
|
Crypto engine state |
Hardware crypto engine state: · Enabled. · Disabled. This field always displays Enabled for software crypto engines. |
|
Crypto engine type |
Crypto engine type: · Hardware. · Software. |
|
Crypto device name |
Name of the crypto device. This field always displays Software for software crypto engines. For hardware crypto engines, the value of this field varies by device model. |
|
Crypto device serial number |
Serial number of the crypto device. This field is always empty for software crypto engines. For hardware crypto engines, the value of this field varies by device model. |
|
Symmetric algorithms |
Supported symmetric algorithms. |
|
Asymmetric algorithms |
Supported asymmetric algorithms. |
|
Random number generation function |
Whether random number generation function is supported: · Supported. · Not supported. |
display crypto-engine statistics
Use display crypto-engine statistics to display crypto engine statistics.
Syntax
In standalone mode:
display crypto-engine statistics [ engine-id engine-id slot slot-number ]
In IRF mode:
display crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
engine-id engine-id: Specifies a crypto engine by its ID.The value range for the engine-id argument is 0 to 4294967295.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
Usage guidelines
If hardware crypto engines are not enabled or the device does not have hardware crypto engines, this command displays statistics only for software crypto engines.
(In standalone mode.) If you do not specify any parameters, this command displays crypto engine statistics for all cards.
(In IRF mode.) If you do not specify any parameters, this command displays crypto engine statistics for all cards.
Examples
# (In standalone mode.) Display all crypto engine statistics.
<Sysname> display crypto-engine statistics
Slot ID: 1
CPU ID: 0
Crypto engine ID: 0
Submitted sessions: 0
Failed sessions: 0
Symmetric operations: 0
Symmetric errors: 0
Asymmetric operations: 0
Asymmetric errors: 0
Get-random operations: 0
Get-random errors: 0
# (In standalone mode.) Display statistics for crypto engine 1 on the specified slot.
<Sysname> display crypto-engine statistics engine-id 1 slot 1
Submitted sessions: 0
Failed sessions: 0
Symmetric operations: 0
Symmetric errors: 0
Asymmetric operations: 0
Asymmetric errors: 0
Get-random operations: 0
Get-random errors: 0
Table 2 Command output
|
Field |
Description |
|
Submitted sessions |
Number of established sessions. |
|
Failed sessions |
Number of failed sessions. |
|
Symmetric operations |
Number of operations using symmetric algorithms. |
|
Symmetric errors |
Number of failed operations using symmetric algorithms. |
|
Asymmetric operations |
Number of operations using asymmetric algorithms. |
|
Asymmetric errors |
Number of failed operations using asymmetric algorithms. |
|
Get-random operations |
Number of operations for obtaining random numbers. |
|
Get-random errors |
Number of failed operations for obtaining random numbers. |
Related commands
reset crypto-engine statistics
reset crypto-engine statistics
Use reset crypto-engine statistics to clear crypto engine statistics.
Syntax
In standalone mode:
reset crypto-engine statistics [ engine-id engine-id slot slot-number ]
In IRF mode:
reset crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
engine-id engine-id: Specifies a crypto engine by its ID.The value range for the engine-id argument is 0 to 4294967295.
slot slot-number: Specifies a card by its slot number. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
Usage guidelines
(In standalone mode.) If you do not specify any parameters, this command clears crypto engine statistics for all cards.
(In IRF mode.) If you do not specify any parameters, this command clears crypto engine statistics for all cards.
Examples
# Clear statistics for all crypto engines.
<Sysname> reset crypto-engine statistics
# Clear statistics for crypto engine 1 on the specified slot.
<Sysname> reset crypto-engine statistics engine-id 1 slot 1
Related commands
