Crypto engine commands -- display crypto-engine

Use display crypto-engine to display crypto engine information.

Syntax

display crypto-engine

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

If the device does not have hardware crypto engines, this command displays information only about software crypto engines.

Examples

# Display crypto engine information.

<Sysname> display crypto-engine

Crypto engine name: cavium crypto driver

Crypto engine state: Enabled

Crypto engine type: Hardware

Slot ID: 1

CPU ID: 0

Crypto engine ID: 0

Symmetric algorithms: des-ecb 3des-cbc 3des-ecb aes-cbc aes-ecb aes-ctr camellia_cbc sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac

Asymmetric algorithms: dh-group1 dh-group2 dh-group5 dh-group14 dh-group24

Random number generation function: Supported

Crypto engine name: Software crypto engine

Crypto engine state: Enabled

Crypto engine type: Software

Slot ID: 1

CPU ID:0

Crypto engine ID: 1

Symmetric algorithms: des-cbc des-ecb 3des-ecb aes-ecb sha1 sha2-256 sha1-hmac sha2-256-hmac

Asymmetric algorithms:

Random number generation function: Supported

# Display crypto engine information.

<Sysname> display crypto-engine

Crypto engine name: Software crypto engine

Crypto engine state: Enabled

Crypto engine type: Software

Slot ID: 1

CPU ID:0

Crypto engine ID: 0

Symmetric algorithms: des-cbc des-ecb 3des-cbc aes-cbc aes-ecb aes-ctr camellia_cbc md5 sha1 sha2-256 sha2-384 sha2-512 md5-hmac sha1-hmac sha2-256-hmac sha2-384-hmac sha2-512-hmac aes-xcbc aes-xcbc-hmac

Asymmetric algorithms:

Random number generation function: Supported

Table 1 Command output

Field | Description
Crypto engine state | Hardware crypto engine state: · Enabled. · Disabled. This field always displays Enabled for software crypto engines.
Crypto engine type | Crypto engine type: · Hardware. · Software.
CPU ID | ID of the CPU on the card.
Symmetric algorithms | Supported symmetric algorithms.
Asymmetric algorithms | Supported asymmetric algorithms.
Random number generation function | Whether random number generation function is supported: · Supported. · Not supported.

Crypto engine commands -- display crypto-engine statistics

Use display crypto-engine statistics to display crypto engine statistics.

Syntax

Centralized devices:

display crypto-engine statistics [ engine-id engine-id ]

Distributed devices in standalone mode:Centralized IRF devices:

display crypto-engine statistics [ engine-id engine-id slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

display crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The value range varies by device model.

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

Usage guidelines

If hardware crypto engines are not enabled or the device does not have hardware crypto engines, this command displays statistics only for software crypto engines.

(Centralized devices.) If you do not specify any parameters, this command displays statistics for all crypto engines.

(Distributed devices in standalone mode.) If you do not specify any parameters, this command displays crypto engine statistics for all cards.

(Centralized IRF devices.) (IRF 3 incapable.) If you do not specify any parameters, this command displays crypto engine statistics for all member devices.

(Centralized IRF devices.) (IRF 3 capable.) On an IRF fabric, this command displays crypto engine statistics for all member devices if you do not specify any parameters. On an IRF 3 system, this command displays crypto engine statistics for all IRF member devices and PEXs if you do not specify any parameters.

(Distributed devices in IRF mode.) (IRF 3 incapable.) If you do not specify any parameters, this command displays crypto engine statistics for all cards.

(Distributed devices in IRF mode.) (IRF 3 capable.) On an IRF fabric, this command displays crypto engine statistics on all cards if you do not specify any parameters. On an IRF 3 system, this command displays crypto engine statistics on all cards and PEXs if you do not specify any parameters.

Examples

# (Centralized devices.) Display all crypto engine statistics.

<Sysname> display crypto-engine statistics

Submitted sessions: 0

Failed sessions: 0

Symmetric operations: 0

Symmetric errors: 0

Asymmetric operations: 0

Asymmetric errors: 0

Get-random operations: 0

Get-random errors: 0

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display all crypto engine statistics.

<Sysname> display crypto-engine statistics

Slot ID: 1

CPU ID: 0

Crypto engine ID: 0

Submitted sessions: 0

Failed sessions: 0

Symmetric operations: 0

Symmetric errors: 0

Asymmetric operations: 0

Asymmetric errors: 0

Get-random operations: 0

Get-random errors: 0

# (Centralized devices.) Display statistics for crypto engine 1.

<Sysname> display crypto-engine statistics engine-id 1

Submitted sessions: 0

Failed sessions: 0

Symmetric operations: 0

Symmetric errors: 0

Asymmetric operations: 0

Asymmetric errors: 0

Get-random operations: 0

Get-random errors: 0

# (Distributed devices in standalone mode.) (Centralized IRF devices.) Display statistics for crypto engine 1 on the specified slot.

<Sysname> display crypto-engine statistics engine-id 1 slot 1

Submitted sessions: 0

Failed sessions: 0

Symmetric operations: 0

Symmetric errors: 0

Asymmetric operations: 0

Asymmetric errors: 0

Get-random operations: 0

Get-random errors: 0

Table 2 Command output

Field | Description
Submitted sessions | Number of established sessions.
Failed sessions | Number of failed sessions.
Symmetric operations | Number of operations using symmetric algorithms.
Symmetric errors | Number of failed operations using symmetric algorithms.
Asymmetric operations | Number of operations using asymmetric algorithms.
Asymmetric errors | Number of failed operations using asymmetric algorithms.
Get-random operations | Number of operations for obtaining random numbers.
Get-random errors | Number of failed operations for obtaining random numbers.

Related commands

reset crypto-engine statistics

Crypto engine commands -- reset crypto-engine statistics

Use reset crypto-engine statistics to clear crypto engine statistics.

Syntax

Centralized devices:

reset crypto-engine statistics [ engine-id engine-id ]

Distributed devices in standalone mode:Centralized IRF devices:

reset crypto-engine statistics [ engine-id engine-id slot slot-number [ cpu cpu-number ] ]

Distributed devices in IRF mode:

reset crypto-engine statistics [ engine-id engine-id chassis chassis-number slot slot-number [ cpu cpu-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

engine-id engine-id: Specifies a crypto engine by its ID. The value range varies by device model.

slot slot-number: Specifies a card by its slot number. (Distributed devices in standalone mode.)

slot slot-number: Specifies an IRF member device by its member ID. (Centralized IRF devices.) (IRF 3 incapable.)

slot slot-number: Specifies an IRF member device by its member ID or specifies a PEX by its virtual slot number. (Centralized IRF devices.) (IRF 3 capable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (Distributed devices in IRF mode.) (IRF 3 incapable.)

chassis chassis-number slot slot-number: Specifies a card on an IRF member device or specifies a PEX. The chassis-number argument represents the member ID of the IRF member device or the virtual chassis number of the PEX. The slot-number argument represents the slot number of the card or PEX. (Distributed devices in IRF mode.) (IRF 3 capable.)

cpu cpu-number: Specifies a CPU by its number. This option is available only if multiple CPUs are available on the specified slot.

Usage guidelines

(Centralized devices.) If you do not specify any parameters, this command clears statistics for all crypto engines.

(Distributed devices in standalone mode.) If you do not specify any parameters, this command clears crypto engine statistics for all cards.

(Centralized IRF devices.) (IRF 3 incapable.) If you do not specify any parameters, this command clears crypto engine statistics for all member devices.

(Centralized IRF devices.) (IRF 3 capable.) On an IRF fabric, this command clears crypto engine statistics for all member devices if you do not specify any parameters. On an IRF 3 system, this command clears crypto engine statistics for all IRF member devices and PEXs if you do not specify any parameters.

(Distributed devices in IRF mode.) (IRF 3 incapable.) If you do not specify any parameters, this command clears crypto engine statistics for all cards.

(Distributed devices in IRF mode.) (IRF 3 capable.) On an IRF fabric, this command clears crypto engine statistics for all cards if you do not specify any parameters. On an IRF 3 system, this command clears crypto engine statistics for all cards and PEXs if you do not specify any parameters.

Examples

# Clear statistics for all crypto engines.

<Sysname> reset crypto-engine statistics

# Clear statistics for crypto engine 1 on the specified slot.

<Sysname> reset crypto-engine statistics engine-id 1 slot 1

Related commands

display crypto-engine statistics