09-Security Command Reference

HomeSupportResource CenterReference GuidesCommand ReferencesH3C S12500X-AF & S12500-X & S9800 Switch Series Command References(R27xx)-6W10509-Security Command Reference
18-Crypto engine commands
Title Size Download
18-Crypto engine commands 42.57 KB

Crypto engine commands

Crypto engine is supported only in Release 2719 and later.

display crypto-engine

Use display crypto-engine to display crypto engine information.

Syntax

display crypto-engine

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display crypto engine information.

<Sysname> display crypto-engine

  Crypto engine name: Software crypto engine

  Crypto engine state: Enabled

  Crypto engine type: Software

  Slot ID: 1

  CPU ID:0

  Crypto engine ID: 0

  Symmetric algorithms:  des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac

  Asymmetric algorithms:

  Random number generation function: Supported

Table 1 Command output

Field

Description

Crypto engine state

This field always displays Enabled for software crypto engines.

Crypto engine type

The value is Software for this field.

CPU ID

ID of the CPU on the card.

Symmetric algorithms

Supported symmetric algorithms.

Asymmetric algorithms

Supported asymmetric algorithms.

Random number generation function

Whether random number generation function is supported:

·     Supported.

·     Not supported.

display crypto-engine statistics

Use display crypto-engine statistics to display crypto engine statistics.

Syntax

In standalone mode:

display crypto-engine statistics [ engine-id engine-id slot slot-number ]

In IRF mode:

display crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The switch supports only one software crypto engine, and the engine ID can only be 0.

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

Usage guidelines

(In standalone mode.) If you do not specify any parameters, this command displays crypto engine statistics for all cards.

(In IRF mode.) If you do not specify any parameters, this command displays crypto engine statistics for all cards on all IRF member devices.

Examples

# (In standalone mode.) Display all crypto engine statistics.

<Sysname> display crypto-engine statistics

  Slot ID: 1

  CPU ID: 0

  Crypto engine ID: 0

  Submitted sessions: 0

  Failed sessions: 0

  Symmetric operations: 0

  Symmetric errors: 0

  Asymmetric operations: 0

  Asymmetric errors: 0

  Get-random operations: 0

  Get-random errors: 0

Table 2 Command output

Field

Description

Submitted sessions

Number of established sessions.

Failed sessions

Number of failed sessions.

Symmetric operations

Number of operations using symmetric algorithms.

Symmetric errors

Number of failed operations using symmetric algorithms.

Asymmetric operations

Number of operations using asymmetric algorithms.

Asymmetric errors

Number of failed operations using asymmetric algorithms.

Get-random operations

Number of operations for obtaining random numbers.

Get-random errors

Number of failed operations for obtaining random numbers.

Related commands

reset crypto-engine statistics

reset crypto-engine statistics

Use reset crypto-engine statistics to clear crypto engine statistics.

Syntax

In standalone mode:

reset crypto-engine statistics [ engine-id engine-id slot slot-number ]

In IRF mode:

reset crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The switch supports only one software crypto engine, and the engine ID can only be 0.

slot slot-number: Specifies a card by its slot number. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)

Usage guidelines

(In standalone mode.) If you do not specify any parameters, this command clears crypto engine statistics for all cards.

(In IRF mode.) If you do not specify any parameters, this command clears crypto engine statistics for all cards on all IRF member devices.

Examples

# Clear statistics for all crypto engines.

<Sysname> reset crypto-engine statistics

Related commands

display crypto-engine statistics

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网