Encryption Connection Table

Provides the following status and statistics for each encryption connection:

Connection index(cieConnIndex)

Protected address(cieProtectedAddr)

Unprotected address(cieUnprotectedAddr)

Connection status(cieConnStatus)

Packets encrypted(ciePktsEncrypted)

Packets decrypted(ciePktsDecrypted)

Packets dropped(ciePktsDropped)

Local time established(cieLocalTimeEstablished)

Algorithm type(cieAlgorithmType)


Connection Index(cieConnIndex)

A number identifying this encrypted connection.


Protected Address(cieProtectedAddr)

The IP address for protected mode (secure mode).


Unprotected Address(cieUnprotectedAddr)

The IP address of the unprotected node (the unsecure node) in the network.


Connection Status(cieConnStatus)

The current status or type of the encryption connection one of the following values is used:

Pending connection

Open connection

Exchange keys

Bad connection

Pending and bad connections can be removed after 4 minutes of inactivity. An open (active) connections can be removed if the encryption timeout interval elapses with no traffic transmitted or received.


Packets Encrypted(ciePktsEncrypted)

The number of packets encrypted for this connection.


Packets Decrypted(ciePktsDecrypted)

The number of packets decrypted for this connection.


Packets Dropped(ciePktsDropped)

The number of packets dropped for this connection. Packets are dropped when the protected entity and the unprotected entity fail to establish encryption keys. If this value increases, verify that encryption keys are properly configured.


Local Time Established(cieLocalTimeEstablished)

The time at which the connection was established or reestablished, expressed as a value of system up time.


Algorithm Type(cieAlgorithmType)

The types of encryption algorithm used for this connection. Supported algorithm types include

Bullet.gif 56-bit DES with 64-bit cipher feedback

Bullet.gif 56-bit DES with 8-bit cipher feedback

Bullet.gif 40-bit DES with 64-bit cipher feedback

Bullet.gif 40-bit DES with 8-bit cipher feedback

A single router can support more than one algorithm type at the same time.