- Table of Contents
-
- 13-Security Command Reference
- 00-Preface
- 01-ACL commands
- 02-Time range commands
- 03-User profile commands
- 04-Public key management commands
- 05-PKI commands
- 06-IPsec commands
- 07-SSH commands
- 08-Attack detection and prevention commands
- 09-ARP attack protection commands
- 10-ND attack defense commands
- 11-Crypto engine commands
- 12-Password control commands
- Related Documents
-
Title | Size | Download |
---|---|---|
11-Crypto engine commands | 39.98 KB |
Crypto engine commands
display crypto-engine
Use display crypto-engine to display crypto engine information.
Syntax
display crypto-engine
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display crypto engine information.
<Sysname> display crypto-engine
Crypto engine name: Software crypto engine
Crypto engine state: Enabled
Crypto engine type: Software
Slot ID: 1
CPU ID: 0
Crypto engine ID: 0
Symmetric algorithms: des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac
Asymmetric algorithms:
Random number generation function: Supported
Table 1 Command output
Field |
Description |
Crypto engine state |
This field always displays Enabled for software crypto engines. |
Crypto engine type |
Crypto engine type, which is Software. |
Symmetric algorithms |
Supported symmetric algorithms. |
Asymmetric algorithms |
Supported asymmetric algorithms. |
Random number generation function |
Whether random number generation function is supported: · Supported. · Not supported. |
display crypto-engine statistics
Use display crypto-engine statistics to display crypto engine statistics.
Syntax
display crypto-engine statistics [ engine-id engine-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
engine-id engine-id: Specifies a crypto engine by its ID.The value range for the engine-id argument is 0 to 4294967295
Usage guidelines
If hardware crypto engines are not enabled or the device does not have hardware crypto engines, this command displays statistics only for software crypto engines.
If you do not specify any parameters, this command displays statistics for all crypto engines.
Examples
# Display all crypto engine statistics.
<Sysname> display crypto-engine statistics
Submitted sessions: 0
Failed sessions: 0
Symmetric operations: 0
Symmetric errors: 0
Asymmetric operations: 0
Asymmetric errors: 0
Get-random operations: 0
Get-random errors: 0
# Display statistics for crypto engine 1.
<Sysname> display crypto-engine statistics engine-id 1
Submitted sessions: 0
Failed sessions: 0
Symmetric operations: 0
Symmetric errors: 0
Asymmetric operations: 0
Asymmetric errors: 0
Get-random operations: 0
Get-random errors: 0
Table 2 Command output
Field |
Description |
Submitted sessions |
Number of established sessions. |
Failed sessions |
Number of failed sessions. |
Symmetric operations |
Number of operations using symmetric algorithms. |
Symmetric errors |
Number of failed operations using symmetric algorithms. |
Asymmetric operations |
Number of operations using asymmetric algorithms. |
Asymmetric errors |
Number of failed operations using asymmetric algorithms. |
Get-random operations |
Number of operations for obtaining random numbers. |
Get-random errors |
Number of failed operations for obtaining random numbers. |
Related commands
reset crypto-engine statistics
reset crypto-engine statistics
Use reset crypto-engine statistics to clear crypto engine statistics.
Syntax
reset crypto-engine statistics [ engine-id engine-id ]
Views
User view
Predefined user roles
network-admin
Parameters
engine-id engine-id: Specifies a crypto engine by its ID.The value range for the engine-id argument is 0 to 4294967295
Usage guidelines
If you do not specify any parameters, this command clears statistics for all crypto engines.
Examples
# Clear statistics for all crypto engines.
<Sysname> reset crypto-engine statistics
Related commands