-
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Command Reference, 4.0
-
About This Guide
-
Using the Command Line Interface
- A through B Commands
- C Commands
- D through F Commands
- G through I Commands
- J through L Commands
- M through O Commands
- P though R Commands
-
S Commands
-
same-security-traffic -- show asdm sessions
-
show asp drop -- show curpriv
-
show debug -- show ipv6 traffic
-
show isakmp sa -- show route
-
show running-config -- show running-config isakmp
-
show running-config logging -- show running-config vpn-sessiondb
-
show service-policy -- show xlate
-
shun -- sysopt uauth allow-http-cache
-
- T through Z Commands
-
Feedback
Table Of Contents
show isakmp sa through show route Commands
show memory delayed-free-poisoner
show isakmp sa through show route Commands
show isakmp sa
To display the IKE runtime SA database, use the show isakmp sa command in global configuration mode or privileged EXEC mode.
show isakmp sa [detail]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
—
—
Privileged EXEC
•
•
•
—
—
Command History
Usage Guidelines
The output from this command includes the following fields:
Detail not specified.
Table 27-2
IKE Peer
Type
Dir
Rky
State
Encrypt
Hash
Auth
Lifetime
209.165.200.225
L2L
Init
No
MM_Active
3des
md5
preshrd
86400
Detail specified.
Examples
The following example, entered in global configuration mode, displays detailed information about the SA database:
hostname(config)# show isakmp sa detailhostname(config)# sho isakmp sa detailIKE Peer Type Dir Rky State Encrypt Hash Auth Lifetime1 209.165.200.225 User Resp No AM_Active 3des SHA preshrd 86400IKE Peer Type Dir Rky State Encrypt Hash Auth Lifetime2 209.165.200.226 User Resp No AM_ACTIVE 3des SHA preshrd 86400IKE Peer Type Dir Rky State Encrypt Hash Auth Lifetime3 209.165.200.227 User Resp No AM_ACTIVE 3des SHA preshrd 86400IKE Peer Type Dir Rky State Encrypt Hash Auth Lifetime4 209.165.200.228 User Resp No AM_ACTIVE 3des SHA preshrd 86400hostname(config)#Related Commands
show isakmp stats
To display runtime statistics, use the show isakmp stats command in privileged EXEC mode.
show isakmp stats
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
The output from this command includes the following fields:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Examples
The following example, issued in global configuration mode, displays ISAKMP statistics:
hostname(config)# show isakmp statsGlobal IKE StatisticsActive Tunnels: 132Previous Tunnels: 132In Octets: 195471In Packets: 1854In Drop Packets: 925In Notifys: 0In P2 Exchanges: 132In P2 Exchange Invalids: 0In P2 Exchange Rejects: 0In P2 Sa Delete Requests: 0Out Octets: 119029Out Packets: 796Out Drop Packets: 0Out Notifys: 264Out P2 Exchanges: 0Out P2 Exchange Invalids: 0Out P2 Exchange Rejects: 0Out P2 Sa Delete Requests: 0Initiator Tunnels: 0Initiator Fails: 0Responder Fails: 0System Capacity Fails: 0Auth Fails: 0Decrypt Fails: 0Hash Valid Fails: 0No Sa Fails: 0hostname(config)#Related Commands
show local-host
To display the IP addresses of hosts that initiated current connections through the FWSM, use the show local-host command in privileged EXEC mode. This command also shows the address translation, if present, and the number of TCP, UDP, and embryonic connections per host.
show local-host [ip_address] [detail] [all]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
In most cases, the "local host" is the initiating host. However, if you configure static NAT for an IP address, that host always shows as the local host even if they did not initiate the connection.
If you configure outside NAT (either static NAT or NAT exemption), and an inside host initiates a connection to the outside host, both the inside and outside hosts are listed as local hosts in the show local-host output. This feature lets you track connection limits for both hosts.
If you configure an embryonic connection limit, and the limit is exceeded, the FWSM implements TCP intercept to prevent a SYN attack. After TCP intercept is triggered, additional embryonic connections do not appear in the show local-host output.
The connection limits are set using the nat or static commands, or using the set connection commands.
Examples
The following examples show how to display the network states of local hosts:
hostname# show local-hostlocal host: <10.5.59.30>, tcp conn(s)/limit = 1/0, embryonic(s)/limit =0/0 udp conn(s)/limit = 0/0Xlate(s):Global 10.5.59.30 Local 10.5.59.30
Related Commands
show logging
To show syslogs currently in the log buffer or to show other logging settings, use the show logging command in privileged EXEC mode.
show logging [message [syslog_id | all] | asdm | queue | setting]
Syntax Description
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
If the logging buffered command is in use, the show logging command without any keywords shows the current message buffer and the current settings.
The show logging queue command lets you to display the following:
•
•
•
Examples
The following is sample output from the show logging command:
hostname(config)# show loggingSyslog logging: enabledTimestamp logging: disabledConsole logging: disabledMonitor logging: disabledBuffer logging: level debugging, 37 messages loggedTrap logging: disabled305001: Portmapped translation built for gaddr 209.165.201.5/0 laddr 192.168.1.2/256...The following is sample output from the show logging message all command:
hostname(config)# show logging message allsyslog 111111: default-level alerts (enabled)syslog 101001: default-level alerts (enabled)syslog 101002: default-level alerts (enabled)syslog 101003: default-level alerts (enabled)syslog 101004: default-level alerts (enabled)syslog 101005: default-level alerts (enabled)syslog 102001: default-level alerts (enabled)syslog 103001: default-level alerts (enabled)syslog 103002: default-level alerts (enabled)syslog 103003: default-level alerts (enabled)syslog 103004: default-level alerts (enabled)syslog 103005: default-level alerts (enabled)syslog 103011: default-level alerts (enabled)syslog 103012: default-level informational (enabled)Related Commands
show mac-address-table
To show the MAC address table, use the show mac-address-table command in privileged EXEC mode.
show mac-address-table [interface_name | count | static]
Syntax Description
Defaults
If you do not specify an interface, all interface MAC address entries are shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
—
•
•
•
—
Command History
Examples
The following is sample output from the show mac-address-table command:
hostname# show mac-address-tableinterface mac address type Time Left-----------------------------------------------------------------------outside 0009.7cbe.2100 static -inside 0010.7cbe.6101 static -inside 0009.7cbe.5101 dynamic 10The following is sample output from the show mac-address-table command for the inside interface:
hostname# show mac-address-table insideinterface mac address type Time Left-----------------------------------------------------------------------inside 0010.7cbe.6101 static -inside 0009.7cbe.5101 dynamic 10The following is sample output from the show mac-address-table count command:
hostname# show mac-address-table countStatic mac-address bridges (curr/max): 0/65535Dynamic mac-address bridges (curr/max): 103/65535Related Commands
show management-access
To display the name of the internal interface configured for management access, use the show management-access command in privileged EXEC mode.
show management-access
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
The management-access command lets you define an internal management interface using the IP address of the firewall interface specified in mgmt_if. (The interface names are defined by the nameif command and displayed in quotes, " ", in the output of the show interface command.)
Examples
The following example shows how to configure a firewall interface named "inside" as the management access interface and display the result:
hostname(config)# management-access insidehostname(config)# show management-accessmanagement-access insideRelated Commands
show memory
To display a summary of the maximum physical memory and current free memory available to the operating system, use the show memory command in privileged EXEC mode.
show memory [detail]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
Usage Guidelines
The show memory command lets you display a summary of the maximum physical memory and current free memory available to the operating system. Memory is allocated as needed.
You can use the show memory detail output with show memory binsize command to debug memory leaks.
You can also display the information from the show memory command using SNMP.
Examples
The following example shows how to display a summary of the maximum physical memory and current free memory available:
hostname# show memoryFree memory: 845044716 bytes (79%)Used memory: 228697108 bytes (21%)------------- ----------------Total memory: 1073741824 bytes (100%)This example shows detailed memory output:
hostname# show memory detail Free memory: 15958088 bytes (24%) Used memory: Allocated memory in use: 29680332 bytes (44%) Reserved memory: 21470444 bytes (32%) ----------------------------- ---------------- Total memory: 67108864 bytes (100%) Least free memory: 4551716 bytes ( 7%) Most used memory: 62557148 bytes (93%) ----- fragmented memory statistics ----- fragment size count total (bytes) (bytes) ---------------- ---------- -------------- 16 8 128 24 4 96 32 2 64 40 5 200 64 3 192 88 1 88 168 1 168 224 1 224 256 1 256 296 2 592 392 1 392 400 1 400 1816 1 1816* 4435968 1 4435968** 11517504 1 11517504 * - top most releasable chunk. ** - contiguous memory on top of heap. ----- allocated memory statistics ----- fragment size count total (bytes) (bytes) ---------------- ---------- -------------- 40 50 2000 48 144 6912 56 24957 1397592 64 101 6464 72 99 7128 80 1032 82560 88 18 1584 96 64 6144 104 57 5928 112 6 672 120 112 13440 128 15 1920 136 87 11832 144 22 3168152 31 4712 160 90 14400 168 65 10920 176 74 13024 184 11 2024 192 8 1536 200 1 200 <output omitted>Related Commands
show memory binsize
To display summary information about the chunks allocated for a specific bin size, use the show memory binsize command in privileged EXEC mode.
show memory binsize size
Syntax Description
size
Displays chunks (memory blocks) of a specific bin size. The bin size is from the "fragment size" column of the show memory detail command output.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
This command has no usage guidelines.
Examples
The following example displays summary information about a chunk allocated to a bin size of 500:
hostname# show memory binsize 500pc = 0x00b33657, size = 460 , count = 1Related Commands
show memory delayed-free-poisoner
To display a summary of the memory delayed-free-poisoner queue usage, use the show memory delayed-free-poisoner command in privileged EXEC mode.
show memory delayed-free-poisoner
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Usage Guidelines
Use the clear memory delayed-free-poisoner command to clear the queue and statistics.
Examples
This following is sample output from the show memory delayed-free-poisoner command:
hostname# show memory delayed-free-poisonerdelayed-free-poisoner statistics:3335600: memory held in queue6095: current queue count0: elements dequeued3: frees ignored by size1530: frees ignored by locking27: successful validate runs0: aborted validate runs01:09:36: local time of last validateTable 27-4 describes the significant fields in the show memory delayed-free-poisoner command output.
Related Commands
show memory profile
To display information about the memory usage (profiling) of the FWSM, use the show memory profile command in privileged EXEC mode.
show memory profile [peak] [detail | collated | status]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
•
•
Command History
Usage Guidelines
Use the show memory profile command to troubleshoot memory usage level and memory leaks. You can still see the profile buffer contents even if profiling has been stopped. Starting profiling clears the buffer automatically.
Note
The following example shows...
hostname# show memory profileRange: start = 0x004018b4, end = 0x004169d0, increment = 00000004 Total = 0The output of the show memory profile detail command (below) is divided into six data columns and one header column, at the far left. The address of the memory bucket corresponding to the first data column is given at the header column (the hexidecimal number). The data itself is the number of bytes that is held by the text/code that falls in the bucket address. A period (.) in the data column means no memory is held by the text at this bucket. Other columns in the row correspond to the bucket address that is greater than the increment amount from the previous column. For example, the address bucket of the first data column in the first row is 0x001069e0. The address bucket of the second data column in the first row is 0x001069e4 and so on. Normally the header column address is the next bucket address; that is, the address of the last data column of the previous row plus the increment. All rows without any usage are suppressed. More than one such contiguous row can be suppressed, indicated with three periods at the header column (...).
hostname# show memory profile detailRange: start = 0x00100020, end = 0x00e006e0, increment = 00000004 Total = 48941152 ... 0x001069e0 . 24462 . . . . ... 0x00106d88 . 1865870 . . . . ... 0x0010adf0 . 7788 . . . . ... 0x00113640 . . . . 433152 . ... 0x00116790 2480 . . . . . <snip>The following example shows collated output:
hostname# show memory profile collatedRange: start = 0x00100020, end = 0x00e006e0, increment = 00000004 Total = 48941152 24462 0x001069e4 1865870 0x00106d8c 7788 0x0010adf4 433152 0x00113650 2480 0x00116790 <snip>The following example shows the peak capture buffer:
hostname# show memory profile peakRange: start = 0x004018b4, end = 0x004169d0, increment = 00000004 Total = 102400The following example shows the peak capture buffer and the number of bytes held:
hostname# show memory profile peak detailRange: start = 0x004018b4, end = 0x004169d0, increment = 00000004 Total = 102400 ... 0x00404c8c . . 102400 . . .The following example shows the current state of memory profiling and the peak capture buffer:
hostname# show memory profile statusInUse profiling: ON Peak profiling: OFF Memory used by profile buffers: 11518860 bytes Profile: 0x00100020-0x00bfc3a8(00000004)Related Commands
show memory-caller address
To display the address ranges configured on the FWSM, use the show memory-caller address command in privileged EXEC mode.
show memory-caller address
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
•
•
Command History
Usage Guidelines
You must first configure an address ranges with the memory caller-address command before you can display them with the show memory-caller address command.
Examples
The following examples show the address ranges configured with the memory caller-address commands, and the resulting display of the show memory-caller address command:hostname# memory caller-address 0x00109d5c 0x00109e08 hostname# memory caller-address 0x009b0ef0 0x009b0f14 hostname# memory caller-address 0x00cf211c 0x00cf4464hostname# show memory-caller addressMove down stack frame for the addresses: pc = 0x00109d5c-0x00109e08 pc = 0x009b0ef0-0x009b0f14 pc = 0x00cf211c-0x00cf4464If address ranges are not configured before entering the show memory-caller address command, no addresses display:
hostname# show memory-caller addressMove down stack frame for the addresses:
Related Commands
show mfib
To display MFIB in terms of forwarding entries and interfaces, use the show mfib command in privileged EXEC mode.
show mfib [group [source]] [verbose]
Syntax Description
Defaults
Without the optional arguments, information for all groups is shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show mfib command:
hostname# show mfib 224.0.2.39Entry Flags: C - Directly Connected, S - Signal, IA - Inherit A flag,AR - Activity Required, D - DropForwarding counts: Pkt Count/Pkts per second/Avg Pkt Size/Kbits per secondOther counts: Total/RPF failed/Other dropsInterface flags: A - Accept, F - Forward, NS - Negate SignallingIC - Internal Copy, NP - Not platform switchedSP - Signal PresentInterface Counts: FS Pkt Count/PS Pkt Count(*,224.0.1.39) Flags: S KForwarding: 0/0/0/0, Other: 0/0/0Related Commands
show mfib verbose
Displays detail information about the forwarding entries and interfaces.
show mfib active
To display active multicast sources, use the show mfib active command in privileged EXEC mode.
show mfib [group] active [kbps]
Syntax Description
group
(Optional) IP address of the multicast group.
kbps
(Optional) Limits the display to multicast streams that are greater-than or equal to this value.
This command has no arguments or keywords.
Defaults
The default value for kbps is 4. If a group is not specified, all groups are shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The output for the show mfib active command displays either positive or negative numbers for the rate PPS. The FWSM displays negative numbers when RPF packets fail or when the router observes RPF packets with an interfaces out (OIF) list. This type of activity may indicate a multicast routing problem.
Examples
The following is sample output from the show mfib active command:
hostname# show mfib activeActive IP Multicast Sources - sending >= 4 kbpsGroup: 224.2.127.254, (sdr.cisco.com)Source: 192.168.28.69 (mbone.ipd.anl.gov)Rate: 1 pps/4 kbps(1sec), 4 kbps(last 1 secs), 4 kbps(life avg)Group: 224.2.201.241, ACM 97Source: 192.168.52.160 (webcast3-e1.acm97.interop.net)Rate: 9 pps/93 kbps(1sec), 145 kbps(last 20 secs), 85 kbps(life avg)Group: 224.2.207.215, ACM 97Source: 192.168.52.160 (webcast3-e1.acm97.interop.net)Rate: 3 pps/31 kbps(1sec), 63 kbps(last 19 secs), 65 kbps(life avg)Related Commands
show mfib count
To display MFIB route and packet count data, use the show mfib count command in privileged EXEC mode.
show mfib [group [source]] count
Syntax Description
group
(Optional) IP address of the multicast group.
source
(Optional) IP address of the multicast route source. This is a unicast IP address in four-part dotted-decimal notation.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command displays packet drop statistics.
Examples
The following sample output from the show mfib count command:
hostname# show mfib countMFIB global counters are :* Packets [no input idb] : 0* Packets [failed route lookup] : 0* Packets [Failed idb lookup] : 0* Packets [Mcast disabled on input I/F] : 0Related Commands
clear mfib counters
Clears MFIB router packet counters.
show mroute count
Displays multicast route counters.
show mfib interface
To display packet statistics for interfaces that are related to the MFIB process, use the show mfib interface command in privileged EXEC mode.
show mfib interface [interface]
Syntax Description
Defaults
Information for all MFIB interfaces is shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following example is sample output from the show mfib interface command:
hostname# show mfib interfaceIP Multicast Forwarding (MFIB) status:Configuration Status: enabledOperational Status: runningMFIB interface status CEF-based output[configured,available]Vlan101 up [ no, no]Vlan102 up [ no, no]Vlan103 up [ no, no]Related Commands
show mfib
Displays MFIB information in terms of forwarding entries and interfaces.
show mfib reserved
To display reserved groups, use the show mfib reserved command in privileged EXEC mode.
show mfib reserved [count | verbose | active [kpbs]]
Syntax Description
Defaults
The default value for kbps is 4.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command displays MFIB entries in the range 224.0.0.0 through 224.0.0.225.
Examples
The following is sample output from the show mfib reserved command:
hostname# command exampleEntry Flags: C - Directly Connected, S - Signal, IA - Inherit A flag,AR - Activity Required, D - Drop Forwarding Counts: Pkt Count/Pkts per second/Avg Pkt Size/Kbits per second Other counts: Total/RPF failed/Other drops Interface Flags: A - Accept, F - Forward, NS - Negate SignallingIC - Internal Copy, NP - Not platform switchedSP - Signal PresentInterface Counts: FS Pkt Count/PS Pkt Count(*,224.0.0.0/4) Flags: C KForwarding: 0/0/0/0, Other: 0/0/0(*,224.0.0.0/24) Flags: KForwarding: 0/0/0/0, Other: 0/0/0(*,224.0.0.1) Flags:Forwarding: 0/0/0/0, Other: 0/0/0outside Flags: ICdmz Flags: ICinside Flags: ICRelated Commands
show mfib status
To display the general MFIB configuration and operational status, use the show mfib status command in privileged EXEC mode.
show mfib status
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show mfib status command:
hostname# show mfib statusIP Multicast Forwarding (MFIB) status:Configuration Status: enabledOperational Status: runningRelated Commands
show mfib
Displays MFIB information in terms of forwarding entries and interfaces.
show mfib summary
To display summary information about the number of MFIB entries and interfaces, use the show mfib summary command in privileged EXEC mode.
show mfib summary
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show mfib summary command:
hostname# show mfib summaryIPv6 MFIB summary:54 total entries [1 (S,G), 7 (*,G), 46 (*,G/m)]17 total MFIB interfacesRelated Commands
show mfib verbose
To display detail information about the forwarding entries and interfaces, use the show mfib verbose command in privileged EXEC mode.
show mfib verbose
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show mfib verbose command:
hostname# show mfib verboseEntry Flags: C - Directly Connected, S - Signal, IA - Inherit A flag,AR - Activity Required, D - DropForwarding counts: Pkt Count/Pkts per second/Avg Pkt Size/Kbits per secondOther counts: Total/RPF failed/Other dropsInterface flags: A - Accept, F - Forward, NS - Negate SignallingIC - Internal Copy, NP - Not platform switchedSP - Signal PresentInterface Counts: FS Pkt Count/PS Pkt Count(*,224.0.1.39) Flags: S KForwarding: 0/0/0/0, Other: 0/0/0(*,224.0.1.40) Flags: S KForwarding: 0/0/0/0, Other: 0/0/0(*,224.0.0.0/8) Flags: KForwarding: 0/0/0/0, Other: 0/0/0Related Commands
show mfib
Displays MFIB information in terms of forwarding entries and interfaces.
show mfib summary
Displays summary information about the number of MFIB entries and interfaces.
show mgcp
To display MGCP configuration and session information, use the show mgcp command in privileged EXEC mode.
show mgcp {commands | sessions} [detail]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
The show mgcp commands command lists the number of MGCP commands in the command queue. The show mgcp sessions command lists the number of existing MGCP sessions. The detail option includes additional information about each command (or session) in the output.
Examples
The following are examples of the show mgcp command options:
hostname# show mgcp commands1 in use, 1 most used, 200 maximum allowedCRCX, gateway IP: host-pc-2, transaction ID: 2052, idle: 0:00:07hostname# show mgcp commands detail1 in use, 1 most used, 200 maximum allowedCRCX, idle: 0:00:10Gateway IP | host-pc-2Transaction ID 2052Endpoint name | aaln/1Call ID | 9876543210abcdefConnection ID |Media IP | 192.168.5.7Media port | 6058hostname# show mgcp sessions1 in use, 1 most usedGateway IP host-pc-2, connection ID 6789af54c9, active 0:00:11hostname# show mgcp sessions detail1 in use, 1 most usedSession active 0:00:14Gateway IP | host-pc-2Call ID | 9876543210abcdefConnection ID | 6789af54c9Endpoint name | aaln/1Media lcl port 6166Media rmt IP | 192.168.5.7Media rmt port 6058Related Commands
show mode
To show the security context mode, use the show mode command in privileged EXEC mode.
show mode
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
The following is sample output from the show mode command.
hostname# show modeFirewall mode: multipleThe flash mode is the SAME as the running mode.The mode can be multiple or single.
Related Commands
context
Creates a security context in the system configuration and enters context configuration mode.
mode
Sets the context mode to single or multiple.
show mrib client
To display information about the MRIB client connections, use the show mrib client command in privileged EXEC mode.
show mrib client [filter] [name client_name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The filter option is used to display the route and interface level flag changes that various MRIB clients have registered. This command option also shows what flags are owned by the MRIB clients.
Examples
The following sample output from the show mrib client command using the filter keyword:
hostname# show mrib client filterMFWD:0 (connection id 0)interest filter:entry attributes: S C IA Dinterface attributes: F A IC NS DP SPgroups:include 0.0.0.0/0interfaces:include Allownership filter:groups:include 0.0.0.0/0interfaces:include Alligmp:77964 (connection id 1)ownership filter:interface attributes: II ID LI LDgroups:include 0.0.0.0/0interfaces:include Allpim:49287 (connection id 5)interest filter:entry attributes: Einterface attributes: SP II ID LI LDgroups:include 0.0.0.0/0interfaces:include Allownership filter:entry attributes: L S C IA Dinterface attributes: F A IC NS DPgroups:include 0.0.0.0/0interfaces:include AllRelated Commands
show mrib route
To display entries in the MRIB table, use the show mrib route command in privileged EXEC mode.
show mrib route [[source | *] [group[/prefix-length]]]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The MFIB table maintains a subset of entries and flags updated from MRIB. The flags determine the forwarding and signaling behavior according to a set of forwarding rules for multicast packets.
In addition to the list of interfaces and flags, each route entry shows various counters. Byte count is the number of total bytes forwarded. Packet count is the number of packets received for this entry. The show mfib count command displays global counters independent of the routes.
Examples
The following is sample output from the show mrib route command:
hostname# show mrib routeIP Multicast Routing Information BaseEntry flags: L - Domain-Local Source, E - External Source to the Domain,C - Directly-Connected Check, S - Signal, IA - Inherit Accept, D - DropInterface flags: F - Forward, A - Accept, IC - Internal Copy,NS - Negate Signal, DP - Don't Preserve, SP - Signal Present,II - Internal Interest, ID - Internal Disinterest, LI - Local Interest,LD - Local Disinterest(*,224.0.0.0/4) RPF nbr: 10.11.1.20 Flags: L CDecapstunnel0 Flags: NS(*,224.0.0.0/24) Flags: D(*,224.0.1.39) Flags: S(*,224.0.1.40) Flags: SPOS0/3/0/0 Flags: II LI(*,238.1.1.1) RPF nbr: 10.11.1.20 Flags: CPOS0/3/0/0 Flags: F NS LIDecapstunnel0 Flags: A(*,239.1.1.1) RPF nbr: 10.11.1.20 Flags: CPOS0/3/0/0 Flags: F NSDecapstunnel0 Flags: ARelated Commands
show mfib count
Displays route and packet count data for the MFIB table.
show mrib route summary
Displays a summary of the MRIB table entries.
show mrib route summary
To display a summary of the MRIB table entries, use the show mrib route summary command in privileged EXEC mode.
show mrib route summary
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show mrib route summary command:
hostname# show mrib route summaryMRIB Route-DB SummaryNo. of (*,G) routes = 0No. of (S,G) routes = 0No. of Route x Interfaces (RxI) = 0Related Commands
show mroute
To display the IPv4 multicast routing table, use the show mroute command in privileged EXEC mode.
show mroute [group [source] | reserved] [active [rate] | count | pruned | summary]
Syntax Description
Defaults
If not specified, the rate argument defaults to 4 kbps.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The show mroute command displays the contents of the multicast routing table. The FWSM populates the multicast routing table by creating (S,G) and (*,G) entries based on PIM protocol messages, IGMP reports, and traffic. The asterisk (*) refers to all source addresses, the "S" refers to a single source address, and the "G" is the destination multicast group address. In creating (S, G) entries, the software uses the best path to that destination group found in the unicast routing table (through RPF).
To view the mroute commands in the running configuration, use the show running-config mroute command.
Examples
The following is sample output from the show mroute command:
hostname(config)# show mrouteMulticast Routing TableFlags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group,C - Connected, L - Local, I - Received Source Specific Host Report,P - Pruned, R - RP-bit set, F - Register flag, T - SPT-bit set,J - Join SPTTimers: Uptime/ExpiresInterface state: Interface, State(*, 239.1.1.40), 08:07:24/never, RP 0.0.0.0, flags: DPCIncoming interface: NullRPF nbr: 0.0.0.0Outgoing interface list:inside, Null, 08:05:45/nevertftp, Null, 08:07:24/never(*, 239.2.2.1), 08:07:44/never, RP 140.0.0.70, flags: SCJIncoming interface: outsideRPF nbr: 140.0.0.70Outgoing interface list:inside, Forward, 08:07:44/neverThe following fields are shown in the show mroute output:
•
–
–
–
–
–
–
–
–
–
–
–
–
For (S, G) entries, indicates that the entry was created because the SPT-Threshold for the group was exceeded. When the J - Join SPT flag is set for (S, G) entries, the FWSM monitors the traffic rate on the source tree and attempts to switch back to the shared tree for this source if the traffic rate on the source tree falls below the SPT-Threshold of the group for more than 1 minute.
Note
If the default SPT-Threshold value of 0 kbps is used for the group, the J - Join SPT flag is always set on (*, G) entries and is never cleared. When the default SPT-Threshold value is used, the FWSM immediately switches to the shortest path source tree when traffic from a new source is received.
•
•
–
–
•
•
•
•
•
Related Commands
show nameif
To view the interface name set using the nameif command, use the show nameif command in privileged EXEC mode.
show nameif [mapped_name]
Syntax Description
mapped_name
(Optional) In multiple context mode, identifies the mapped name if it was assigned using the allocate-interface command.
Defaults
If you do not specify an interface, the FWSM shows all interface names.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
In multiple context mode, if you mapped the interface ID in the allocate-interface command, you can only specify the mapped name in a context. The output for this command shows only the mapped name in the Interface column.
Examples
The following is sample output from the show nameif command:
hostname# show nameifInterface Name SecurityVlan20 outside 0Vlan35 inside 100Vlan36 test2 50Related Commands
show np
To display information about the network processors, use the show np command in privileged EXEC mode.
show np {number item | all}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
The show np command displays the amount of time thresholds were reached in each NP.
Examples
The following is sample output from the show np command in single mode:
hostname# show npMAX FREE THRESH_0 THRESH_1 THRESH_2NP1 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0NP2 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0NP3 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0hostname(config-ctx)#The following is sample output from the show np asr-table command in single mode:
hostname# show np 1 asr-table all--------------------------------------------------------------------------------ASR Table (NP-1)--------------------------------------------------------------------------------ASR Group | Vlan Entries in ASR Group (0 denotes empty slot)--------------------------------------------------------------------------------1 | 0 0 0 0 0 0 0 0...32 | 0 0 0 0 0 0 0 0--------------------------------------------------------------------------------hostname#The following is sample output from the show np 1 flow-control command in single mode:
hostname# show np 1 flow-controlFlow control for np 1REGISTER ADDRESS DATAi_tx_prob 0x30000000 0x7f7f7f7fi_rand_num 0x30000100 0x33994fbbi_fq_th 0xa0400020 0x00000000e_tx_prob 0xb0000000 0x7f7f7f7fe_rand_num 0xb0001000 0x7f7f7f7fp0_twin_th 0xa0400100 0x0007ffffp1_twin_th 0xa0400200 0x0007ffffe_p0_ewma_th 0xa0400400 0x0007ffffe_p1_ewma_th 0xa0400800 0x0007ffffewma_k 0xa0400040 0x00000000ewma_t 0xa0400080 0x00000000res_data_cfg 0xa0000880 0x00000003The following is sample output from the show np 1 fogrp-table all command in single mode:
hostname# show np 1 fogrp-table all--------------------------------------------------------------------------------Failover Group Table (NP-1)--------------------------------------------------------------------------------Failover Group ID : 0My MAC address : 0005.9a38.8100Other MAC address : 0000.0000.0000Flags : 0x1|- Failover Stop Traffic : 0|- Logical Update Enabled : 0|- Logical Update Sync HTTP : 0|- Logical Update Force Sync : 0`- Failover Active : 1--------------------------------------------------------------------------------The following is sample output from the show np 1 global-table command in single mode:
hostname# sh np 1 global-table...--------------------------------------------------------------------------------Global Table (NP-1)--------------------------------------------------------------------------------Admin VCID : 1Global Flags : 0x2000|- Virtual Mode : 0|- Failover : 0|- Failover State : 1|- Logical Update : 0|- LU_Sync_HTTP : 0|- Fixup ICMP : 0`- Fixup ICMP Error : 0LU Interface : 0LU Time : 15000DestMAC Address of LU interface : 0x000000000000SrcMAC Address of LU interface : 0x000000000000Vlan ID in LU packet : 0Type for LU packets : 0xaaaaOriginating blade : 0--------------------------------------------------------------------------------hostname#The following is sample output from the show np 1 hw-status command in single mode:
hostname# sh np 1 hw-statusHw status for np 1REGISTER ADDRESS DATAmy_tb 0xa0004080 0x00000000local_tb 0xa0004100 0x80000000local_mc_tb 0xa0004200 0x80000000init_done 0xa0008200 0xffff8000ready 0xa0040020 0x80000000pll_lock 0xa0000220 0x00000000bcb_fq_th_0 0xa0001010 0x03000000bcb_fq_th_1 0xa0001020 0x05000000bcb_fq_th_2 0xa0001040 0x0a000000bcb_fq_th_GT 0xa0001080 0x40000000ppc_boot_redir 0x38000117 0x00000000ppc_watchdog 0xa0004800 0x00000000thread_enable 0xa0008020 0xffffffffgfh_data 0x24c00030 0x00000000i_max_dispatch 0x24400c40 0x80000000e_max_dispatch 0x24400c50 0x80000000semaphore 0x25000180 0x00000000tp_ds_map 0xa0000140 0xaaaaaaaae_sdm_stack_th 0xa0001800 0x80000000fq_es_max 0xa0002100 0x00000000fq_es_th_0 0xa0002010 0x06000000fq_es_th_1 0xa0002020 0x08000000fq_es_th_2 0xa0002040 0x20000000discard_qcb 0xa0001400 0x00000029bw_alloc 0xa0002800 0x00000000fcb_fq_size 0xa0002200 0x40000000dmu_cfg_A 0xa0010010 0x00000000dmu_cfg_B 0xa0010020 0x00000000dmu_cfg_C 0xa0010040 0x00000000dmu_cfg_D 0xa0010080 0x00000001qd_ac 0xa0024000 0x00000000nightly-fx1/admin(config)#The following is sample output from the show np 1 interface-vlan command in single mode:
hostname# sh np 1 interface-vlan 1WARNING: Vlan is shared by multiple contexts--------------------------------------------------------------------------------Interface Statistics Counters (NP-1)--------------------------------------------------------------------------------Vlan Number : 1Total Number of Packets RCV : 0Total Number of Packets TX : 0Total Number of Bytes RCV : 0Total Number of Bytes TX : 0Total Number of Packets Dropped : 0hostname#The following is sample output from the show np 1 mac command in single mode:
hostname# sh np 1 macNumber of mac-address entries = 0hostname#The following is sample output from the show np 1 mcast command in single mode:
hostname# sh np 1 mcast-------------------------------------------------------------------------------Fast Path Multicast Statistics Counters (NP-1)-------------------------------------------------------------------------------MULTICAST_DROP: Destination IP address not class_D : 0MULTICAST_DROP: OSPF not enabled : 0MULTICAST_DROP: RIP not enabled : 0MULTICAST_DROP: Not UDP packet : 0MULTICAST_DROP: Leaf not active : 0MULTICAST_DROP: Leaf marked for deletion : 0MULTICAST_DROP: Dest port equal to 0 : 0MULTICAST_CNT : Control packet sent to PC : 0MULTICAST_CNT : Data packet received : 0MULTICAST_CNT : Data packet sent out : 0MULTICAST_CNT : Look up miss : 0MULTICAST_CNT : Look up hit : 0MULTICAST_CNT : Sent to other NP : 0MULTICAST_CNT : Sent to NP 3 : 0MULTICAST_CNT : IGMP update received : 0MULTICAST_CNT : A200 packets received : 0MULTICAST_CNT : Leaf insertion succesfull : 0MULTICAST_CNT : Duplicate_entry : 0hostname#The following is sample output from the show np 1 route command in single mode:
hostname# sh np 1 routeNumber of routes = 0hostname#The following is sample output from the show np 1 semaphore command in single mode:
hostname# sh np 1 semaphoreShowing Semaphore Information for np 1ThreadNum SemNum SemVal Valid Pending0 0 0x02e09020 N N1 0x00000000 N N1 0 0x00000037 N N1 0x00000000 N N2 0 0x024381e8 Y N1 0x00000000 N N3 0 0x02e0d098 N N1 0x00000000 N N4 0 0x00000000 N N1 0x00000000 N N5 0 0x00000000 N N1 0x00000000 N N6 0 0x00000000 N N1 0x00000000 N N7 0 0x00000000 N N1 0x00000000 N N8 0 0x00000000 N N1 0x00000000 N N9 0 0x00000000 N N1 0x00000000 N N10 0 0x00000000 N N1 0x00000000 N N11 0 0x00000000 N N1 0x00000000 N N12 0 0x00000000 N N1 0x00000000 N N13 0 0x00000000 N N1 0x00000000 N N14 0 0x00000000 N N1 0x00000000 N N15 0 0x0282ae38 N N1 0x00000000 N N16 0 0x00000000 N N1 0x00000000 N N17 0 0x00000000 N N1 0x00000000 N N18 0 0x00000000 N N1 0x00000000 N N19 0 0x00000000 N N1 0x00000000 N N20 0 0x00000000 N N1 0x00000000 N N21 0 0x00000000 N N1 0x00000000 N N22 0 0x00000000 N N1 0x00000000 N N23 0 0x0282ae38 N N1 0x00000000 N N24 0 0x00000000 N N1 0x00000000 N N25 0 0x00000000 N N1 0x00000000 N N26 0 0x00000000 N N1 0x00000000 N N27 0 0x0282ae38 N N1 0x00000000 N N28 0 0x00000000 N N1 0x00000000 N N29 0 0x00000000 N N1 0x00000000 N N30 0 0x00000000 N N1 0x00000000 N N31 0 0x82812799 N N1 0x00000000 N Nhostname#The following is sample output from the show np 1 stats command in single mode:
hostname# sh np 1 stats-------------------------------------------------------------------------------Fast Path 64 bit Global Statistics Counters (NP-1)-------------------------------------------------------------------------------PKT_MNG: total packets (dot1q) rcvd : 93605PKT_MNG: total packets (dot1q) sent : 0PKT_MNG: total packets (dot1q) dropped : 0PKT_MNG: TCP packets received : 0PKT_MNG: UDP packets received : 0PKT_MNG: ICMP packets received : 0PKT_MNG: ARP packets received : 80259PKT_MNG: other protocol pkts received : 0PKT_MNG: default (no IP/ARP) dropped : 0SESS_MNG: sessions created : 0SESS_MNG: sessions embryonic to active : 0SESS_MNG: sessions deleted : 0SESS_MNG: session lookup hits : 0SESS_MNG: session lookup misses : 0SESS_MNG: embryonic lookup hits : 0SESS_MNG: embryonic lookup misses : 0-------------------------------------------------------------------------------Fast Path 32 bit Global Statistics Counters (NP-1)-------------------------------------------------------------------------------SESS_MNG: insert errors : 0SESS_MNG: embryonic to active errors : 0SESS_MNG: delete errors : 0PKT_MNG: packets to NP-3 : 0PKT_MNG: packets from NP-3 : 1795PKT_MNG: packets to FWSM : 1794PKT_MNG: packets from FWSM : 0PKT_MNG: packets sent to other blade : 0PKT_MNG: packets rcv from other blade : 0PKT_MNG: pkt drop (l2 checks) : 13346PKT_MNG: pkt drop (l3 checks) : 0PKT_MNG: pkt drop (l4 checks) : 0PKT_MNG: pkt drop (rate limiting) : 0PKT_MNG: pkt drop (A200) : 0LU_MNG: UDP packets sent by FP ok : 0LU_MNG: TCP packets sent by FP ok : 0LU_MNG: LU packets sent by SP ok : 0LU_MNG: LU packets sent errors : 0LU_MNG: UDP packets received for FP ok : 0LU_MNG: TCP packets received for FP ok : 0LU_MNG: LU packets received for SP ok : 0LU_MNG: LU packets received errors : 0LU_MNG: LU packets redirected to NP3 : 0LU_MNG: LU packets returned by NP3 : 0TLV_MNG: indications sent : 0TLV_MNG: wrong tlv type (pkt dropped) : 0DBG_MNG: delete indications sent : 0DBG_MNG: TLV4 received : 0DBG_MNG: embryonic leaves deleted : 0RTL_MNG: Route Lookup miss (pkt drop) : 0RTL_MNG: ARP Lookup miss : 0RTL_MNG: MAC Relearns forced : 0RTL_MNG: MAC Relearns forced aborted : 0AGE_MNG: Aging threads launched : 2099132AGE_MNG: Aging threads aborted : 0AGE_MNG: Aging ropes completed : 524783AGE_MNG: Aging Errors (no flag set) : 0AGE_MNG: Aging Errors (no timeout set) : 0PKT_MNG: PKT_DROP_DHCP_INGR : 0PKT_MNG: PKT_DROP_MULTIC_BROADC_INGR : 0PKT_MNG: PKT_DROP_A200_INGR : 0PKT_MNG: PKT_DROP_ARP_INGR : 80259PKT_MNG: PKT_DROP_A300_INGR : 0PKT_MNG: PKT_DROP_NOT_DOT1Q_INGR : 2130195PKT_MNG: PKT_DROP_A200_EGR : 0PKT_MNG: PKT_DROP_A200_EMBR_LEAF_NON_ACTIVE : 0PKT_MNG: PKT_DROP_A200_EMBR_LEAF_MARK_DEL : 0PKT_MNG: PKT_DROP_A200_NAT_LEAF_NON_ACTIVE : 0PKT_MNG: PKT_DROP_A200_NAT_LEAF_MARK_DEL : 0PKT_MNG: PKT_DROP_A200_TLV_UPDATE_LEAF_NON_ACTIVE : 0PKT_MNG: PKT_DROP_A200_TLV_UPDATE_LEAF_MARK_DEL : 0PKT_MNG: PKT_DROP_A200_TLV_DEL_LEAF_NON_ACTIVE : 0PKT_MNG: PKT_DROP_A200_TLV_DEL_LEAF_MARK_DE : 0PKT_MNG: PKT_DROP_A200_LINK_DATA_CH_FAIL : 0PKT_MNG: PKT_DROP_A200_LEAF_INSERTION_FAIL : 0PKT_MNG: PKT_DROP_L4_FIXUP_ACK : 0PKT_MNG: PKT_DROP_L4_FIXUP_SYN : 0PKT_MNG: PKT_DROP_L4_FIXUP_RST : 0PKT_MNG: PKT_DROP_L4_FIXUP_SYN_ACK : 0RL_MNG: session miss packet dropped : 0RL_MNG: other protocol or ICMP dropped : 0RL_MNG: packet to PIX dropped : 0RL_MNG: packet to Fixup-PC dropped : 0RL_MNG: packet to Fixup-SP dropped : 0PF_MNG: pause frames sent (x3) : 0PKT_MNG: PKT_DROP_INVALID_GROUP_ID : 0PKT_MNG: PKT_DROP_INVALID_PAIR_VLAN : 0PKT_MNG: PKT_DROP_L4_BAD_FLAGS : 0PKT_MNG: PKT_DROP_L4_SEND_RST_A300 : 0PKT_MNG: PKT_DROP_L4_SEND_RST_ALREADY_RST : 0PKT_MNG: PKT_DROP_L4_SYN_ACK_SAME_DIREC_OF_SYN : 0PKT_MNG: PKT_DROP_L4_ACK_NOT_ACK_THE_SYN_ACK_INS : 0PKT_MNG: PKT_DROP_L4_ACK_NOT_ACK_THE_SYN_ACK_OUT : 0PKT_MNG: PKT_DROP_L4_ACK_RCV_IN_WRONG_DIRECTION : 0PKT_MNG: PKT_DROP_L4_BAD_CHECKSUM : 0PKT_MNG: PKT_DROP_PIF_LOOKUP_FAIL : 0PKT_MNG: PKT_DROP_BACK_TO_BACK_PACKET : 0CNT_NUMBER_FULL_OPEN_INDICATION_TO_BE_SENT : 0CNT_NUMBER_FULL_OPEN_INDICATION_SENT : 0IPv6 packet received : 0IPv6 packet sent : 0IPv6 packet received from PC : 0IPv6 packet sent to PC : 0hostname#The following is sample output from the show np 1 status command in single mode:
hostname# sh np 1 statusShowing the np 1 statusNP VALUE STATUS1 0x00000005 Unknown Codehostname#The following is sample output from the show np 1 syn-cookie command in single mode:
hostname# sh np 1 syn-cookie-------------------------------------------------------------------------------Fast Path Syn Cookie Statistics Counters (NP-1)-------------------------------------------------------------------------------SYN_COOKIE: Syn cookie secret wheel index : 94SYN_COOKIE: Total number of SYNs intercepted : 0SYN_COOKIE: Total number of ACKs intercepted : 0SYN_COOKIE: Total number of ACKs dropped after lookup : 0SYN_COOKIE: Total number of ACKs successfully validated : 0SYN_COOKIE: Total number of ACKs Dropped: Secret Expired : 0SYN_COOKIE: Total number of ACKs Dropped: Invalid Sequence : 0SYN_COOKIE: Total number of Syn Cookie Entries inserted by NP3 : 0SYN_COOKIE: ACKs dropped: Syn cookie ses not yet established : 0SYN_COOKIE: Leaf allocation failed : 0SYN_COOKIE: Leaf insertion failed : 0hostname#
Related Commands
show np block
Displays NP block information.
show np pc
Displays NP program counters.
show np acl-notification
Displays the status of NP access list notifications.
show np acl-notification
To display the status of NP access list notifications, use the show np acl-notification command in privileged EXEC mode.
show np acl-notification
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
The following is sample output from the show np acl-notification command in single mode:
hostname# show np acl-notificationacl-notification onhostname(config-ctx)#
Related Commands
show np
Displays extended NP information.
show np block
Displays NP block information.
show np pc
Displays the status of NP program counters.
show np block
To display the buffer information in all the network processors, use the show np block command in privileged EXEC mode.
show np block
Syntax Description
block
Shows the maximum and free blocks in each side (ingress or egress) in each NP and the amount of time thresholds were reached in each NP.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
The show np block command displays the amount of time thresholds were reached in each NP.
Examples
The following is sample output from the show np block command in single mode:
hostname# show np blockMAX FREE THRESH_0 THRESH_1 THRESH_2NP1 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0NP2 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0NP3 (ingress) 32768 32768 0 0 0(egress) 521206 521206 0 0 0hostname(config-ctx)#
Related Commands
show np
Displays extended NP information.
show np pc
Displays NP program counters.
show np acl-notification
Displays the status of NP access list notifications.
show np pc
To display the program counter in each of the 32 threads in all the network processors, use the show np pc command in privileged EXEC mode.
show np pc
Syntax Description
pc
Shows the maximum and free pcs in each side (ingress or egress) in each NP and the amount of time thresholds were reached in each NP.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
The following is sample output from the show np pc command in single mode:
hostname# show np pcTHREAD:PC(NP1/NP2/NP3)0:0000/0000/0000 1:0000/0000/0000 2:5c4a/45ff/0000 3:0000/0000/00004:0000/0000/0000 5:0000/0000/0000 6:0000/0000/0000 7:0000/0000/00008:0000/0000/0000 9:0000/0000/0000 10:0000/0000/0000 11:0000/0000/000012:0000/0000/0000 13:0000/0000/0000 14:0000/0000/0000 15:0000/0000/000016:0000/0000/0000 17:0000/0000/0000 18:0000/0000/0000 19:0000/0000/000020:0000/0000/0000 21:0000/0000/0000 22:0000/0000/0000 23:4628/0000/000024:0000/0000/0000 25:0000/0000/0000 26:0000/0000/0000 27:0000/0000/000028:0000/0000/0000 29:0000/0000/0000 30:0000/0000/0000 31:0000/0000/0000hostname(config-ctx)#
Table 27-6 show np pc Fields
THREAD
Displays the program counter in each of the 32 threads in all the network processors
Related Commands
show np
Displays extended NP information.
show np block
Displays NP block information.
show np acl-notification
Activates NP access list notifications.
show ospf
To display the general information about the OSPF routing processes, use the show ospf command in privileged EXEC mode.
show ospf [pid [area_id]]
Syntax Description
area_id
(Optional) ID of the area that is associated with the OSPF address range.
pid
(Optional) The ID of the OSPF process.
Defaults
Lists all OSPF processes if no pid is specified.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf).
3.1(1)
This command was changed from show ip ospf to show ospf.
Usage Guidelines
If the pid is included, only information for the specified routing process is included.
Examples
The following is sample output from the show ospf command, showing how to display general information about a specific OSPF routing process:
hostname# show ospf 5Routing Process "ospf 5" with ID 127.0.0.1 and Domain ID 0.0.0.5Supports only single TOS(TOS0) routesSupports opaque LSASPF schedule delay 5 secs, Hold time between two SPFs 10 secsMinimum LSA interval 5 secs. Minimum LSA arrival 1 secsNumber of external LSA 0. Checksum Sum 0x 0Number of opaque AS LSA 0. Checksum Sum 0x 0Number of DCbitless external and opaque AS LSA 0Number of DoNotAge external and opaque AS LSA 0Number of areas in this router is 0. 0 normal 0 stub 0 nssaExternal flood list length 0The following is sample output from the show ospf command, showing how to display general information about all OSPF routing processes:
hostname# show ospfRouting Process "ospf 5" with ID 127.0.0.1 and Domain ID 0.0.0.5Supports only single TOS(TOS0) routesSupports opaque LSASPF schedule delay 5 secs, Hold time between two SPFs 10 secsMinimum LSA interval 5 secs. Minimum LSA arrival 1 secsNumber of external LSA 0. Checksum Sum 0x 0Number of opaque AS LSA 0. Checksum Sum 0x 0Number of DCbitless external and opaque AS LSA 0Number of DoNotAge external and opaque AS LSA 0Number of areas in this router is 0. 0 normal 0 stub 0 nssaExternal flood list length 0Routing Process "ospf 12" with ID 172.23.59.232 and Domain ID 0.0.0.12Supports only single TOS(TOS0) routesSupports opaque LSASPF schedule delay 5 secs, Hold time between two SPFs 10 secsMinimum LSA interval 5 secs. Minimum LSA arrival 1 secsNumber of external LSA 0. Checksum Sum 0x 0Number of opaque AS LSA 0. Checksum Sum 0x 0Number of DCbitless external and opaque AS LSA 0Number of DoNotAge external and opaque AS LSA 0Number of areas in this router is 0. 0 normal 0 stub 0 nssaExternal flood list length 0Related Commands
show ospf border-routers
To display the internal OSPF routing table entries to ABRs and ASBRs, use the show ospf border-routers command in privileged EXEC mode.
show ospf border-routers
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf border-routers).
3.1(1)
This command was changed from show ip ospf border-routers to show ospf border-routers.
Examples
The following is sample output from the show ospf border-routers command:
hostname# show ospf border-routersOSPF Process 109 internal Routing TableCodes: i - Intra-area route, I - Inter-area routei 192.168.97.53 [10] via 192.168.1.53, fifth, ABR, Area 0, SPF 20i 192.168.103.51 [10] via 192.168.96.51, outside, ASBR, Area 192.168.12.0, SPF 14i 192.168.103.52 [10] via 192.168.96.51, outside, ABR/ASBR, Area 192.168.12.0, SPF 14Related Commands
show ospf database
To display the information contained in the OSPF topological database on the FWSM, use the show ospf database command in privileged EXEC mode.
show ospf [pid [area_id]] database [router | network | summary | asbr-summary | external | nssa-external] [lsid] [internal] [self-originate | adv-router addr]
show ospf [pid [area_id]] database database-summary
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf database).
3.1(1)
This command was changed from show ip ospf database to show ospf database.
Usage Guidelines
You do not need to be in an OSPF configuration mode to use the OSPF-related show commands.
Examples
The following is sample output from the show ospf database command:
hostname# show ospf databaseOSPF Router with ID(192.168.1.11) (Process ID 1)Router Link States(Area 0)Link ID ADV Router Age Seq# Checksum Link count192.168.1.8 192.168.1.8 1381 0x8000010D 0xEF60 2192.168.1.11 192.168.1.11 1460 0x800002FE 0xEB3D 4192.168.1.12 192.168.1.12 2027 0x80000090 0x875D 3192.168.1.27 192.168.1.27 1323 0x800001D6 0x12CC 3Net Link States(Area 0)Link ID ADV Router Age Seq# Checksum172.16.1.27 192.168.1.27 1323 0x8000005B 0xA8EE172.17.1.11 192.168.1.11 1461 0x8000005B 0x7ACType-10 Opaque Link Area Link States (Area 0)Link ID ADV Router Age Seq# Checksum Opaque ID10.0.0.0 192.168.1.11 1461 0x800002C8 0x8483 010.0.0.0 192.168.1.12 2027 0x80000080 0xF858 010.0.0.0 192.168.1.27 1323 0x800001BC 0x919B 010.0.0.1 192.168.1.11 1461 0x8000005E 0x5B43 1The following is sample output from the show ospf database asbr-summary command:
hostname# show ospf database asbr-summaryOSPF Router with ID(192.168.239.66) (Process ID 300)Summary ASB Link States(Area 0.0.0.0)Routing Bit Set on this LSALS age: 1463Options: (No TOS-capability)LS Type: Summary Links(AS Boundary Router)Link State ID: 172.16.245.1 (AS Boundary Router address)Advertising Router: 172.16.241.5LS Seq Number: 80000072Checksum: 0x3548Length: 28Network Mask: 0.0.0.0TOS: 0 Metric: 1The following is sample output from the show ospf database router command:
hostname# show ospf database routerOSPF Router with id(192.168.239.66) (Process ID 300)Router Link States(Area 0.0.0.0)Routing Bit Set on this LSALS age: 1176Options: (No TOS-capability)LS Type: Router LinksLink State ID: 10.187.21.6Advertising Router: 10.187.21.6LS Seq Number: 80002CF6Checksum: 0x73B7Length: 120AS Boundary RouterNumber of Links: 8Link connected to: another Router (point-to-point)(link ID) Neighboring Router ID: 10.187.21.5(Link Data) Router Interface address: 10.187.21.6Number of TOS metrics: 0TOS 0 Metrics: 2The following is sample output from the show ospf database network command:
hostname# show ospf database networkOSPF Router with id(192.168.239.66) (Process ID 300)Displaying Net Link States(Area 0.0.0.0)LS age: 1367Options: (No TOS-capability)LS Type: Network LinksLink State ID: 10.187.1.3 (address of Designated Router)Advertising Router: 192.168.239.66LS Seq Number: 800000E7Checksum: 0x1229Length: 52Network Mask: 255.255.255.0Attached Router: 192.168.239.66Attached Router: 10.187.241.5Attached Router: 10.187.1.1Attached Router: 10.187.54.5Attached Router: 10.187.1.5The following is sample output from the show ospf database summary command:
hostname# show ospf database summaryOSPF Router with id(192.168.239.66) (Process ID 300)Displaying Summary Net Link States(Area 0.0.0.0)LS age: 1401Options: (No TOS-capability)LS Type: Summary Links(Network)Link State ID: 10.187.240.0 (summary Network Number)Advertising Router: 10.187.241.5LS Seq Number: 80000072Checksum: 0x84FFLength: 28Network Mask: 255.255.255.0 TOS: 0 Metric: 1The following is sample output from the show ospf database external command:
hostname# show ospf database externalOSPF Router with id(192.168.239.66) (Autonomous system 300)Displaying AS External Link StatesLS age: 280Options: (No TOS-capability)LS Type: AS External LinkLink State ID: 172.16.0.0 (External Network Number)Advertising Router: 10.187.70.6LS Seq Number: 80000AFDChecksum: 0xC3ALength: 36Network Mask: 255.255.0.0Metric Type: 2 (Larger than any link state path)TOS: 0Metric: 1Forward Address: 0.0.0.0External Route Tag: 0Related Commands
show ospf flood-list
To display a list of OSPF LSAs waiting to be flooded over an interface, use the show ospf flood-list command in privileged EXEC mode.
show ospf flood-list interface_name
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf flood-list).
3.1(1)
This command was changed from show ip ospf flood-list to show ospf flood-list.
Usage Guidelines
You do not need to be in an OSPF configuration mode to use the OSPF-related show commands.
Examples
The following is sample output from the show ospf flood-list command:
hostname# show ospf flood-list outsideInterface outside, Queue length 20Link state flooding due in 12 msecType LS ID ADV RTR Seq NO Age Checksum5 10.2.195.0 192.168.0.163 0x80000009 0 0xFB615 10.1.192.0 192.168.0.163 0x80000009 0 0x29385 10.2.194.0 192.168.0.163 0x80000009 0 0x7575 10.1.193.0 192.168.0.163 0x80000009 0 0x1E425 10.2.193.0 192.168.0.163 0x80000009 0 0x124D5 10.1.194.0 192.168.0.163 0x80000009 0 0x134CRelated Commands
show ospf interface
To display the OSPF-related interface information, use the show ospf interface command in privileged EXEC mode.
show ospf interface [interface_name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf interface).
3.1(1)
This command was changed from show ip ospf interface to show ospf interface.
Usage Guidelines
When used without the interface_name argument, the OSPF information for all interfaces is shown.
Examples
The following is sample output from the show ospf interface command:
hostname# show ospf interface insideinside is up, line protocol is upInternet Address 192.168.254.202, Mask 255.255.255.0, Area 0.0.0.0AS 201, Router ID 192.77.99.1, Network Type BROADCAST, Cost: 10Transmit Delay is 1 sec, State OTHER, Priority 1Designated Router id 192.168.254.10, Interface address 192.168.254.10Backup Designated router id 192.168.254.28, Interface addr 192.168.254.28Timer intervals configured, Hello 10, Dead 60, Wait 40, Retransmit 5Hello due in 0:00:05Neighbor Count is 8, Adjacent neighbor count is 2Adjacent with neighbor 192.168.254.28 (Backup Designated Router)Adjacent with neighbor 192.168.254.10 (Designated Router)Related Commands
show ospf neighbor
To display the OSPF-neighbor information on a per-interface basis, use the show ospf neighbor command in privileged EXEC mode.
show ospf neighbor [detail | interface_name [nbr_router_id]]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf neighbor).
3.1(1)
This command was changed from show ip ospf neighbor to show ospf neighbor.
Examples
The following is sample output from the show ospf neighbor command. It shows how to display the OSPF-neighbor information on a per-interface basis.
hostname# show ospf neighbor outsideNeighbor 192.168.5.2, interface address 10.225.200.28In the area 0 via interface outsideNeighbor priority is 1, State is FULL, 6 state changesDR is 10.225.200.28 BDR is 10.225.200.30Options is 0x42Dead timer due in 00:00:36Neighbor is up for 00:09:46Index 1/1, retransmission queue length 0, number of retransmission 1First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)Last retransmission scan length is 1, maximum is 1Last retransmission scan time is 0 msec, maximum is 0 msecRelated Commands
neighbor
Configures OSPF routers interconnecting to non-broadcast networks.
router ospf
Enables OSPF routing and configures global OSPF routing parameters.
show ospf request-list
To display a list of all LSAs that are requested by a router, use the show ospf request-list command in privileged EXEC mode.
show ospf request-list nbr_router_id interface_name
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf request-list).
3.1(1)
This command was changed from show ip ospf request-list to show ospf request-list.
Examples
The following is sample output from the show ospf request-list command:
hostname# show ospf request-list 192.168.1.12 insideOSPF Router with ID (192.168.1.11) (Process ID 1)Neighbor 192.168.1.12, interface inside address 172.16.1.12Type LS ID ADV RTR Seq NO Age Checksum1 192.168.1.12 192.168.1.12 0x8000020D 8 0x6572Related Commands
show ospf retransmission-list
To display a list of all LSAs waiting to be resent, use the show ospf retransmission-list command in privileged EXEC mode.
show ospf retransmission-list nbr_router_id interface_name
Syntax Description
interface_name
Name of the interface for which to display neighbor information.
nbr_router_id
Router ID of the neighbor router.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf retransmission-list).
3.1(1)
This command was changed from show ip ospf retransmission-list to show ospf retransmission-list.
Usage Guidelines
The OSPF routing-related show commands are available in privileged mode on the FWSM. You do not need to be in an OSPF configuration mode to use the OSPF-related show commands.
The nbr_router_id argument displays the list of all LSAs that are waiting to be resent for this neighbor.
The interface_name argument displays the list of all LSAs that are waiting to be resent for this interface.
Examples
The following is sample output from the show ospf retransmission-list command, where the nbr_router_id argument is 192.168.1.11 and the if_name argument is outside:
hostname# show ospf retransmission-list 192.168.1.11 outsideOSPF Router with ID (192.168.1.12) (Process ID 1)Neighbor 192.168.1.11, interface outside address 172.16.1.11Link state retransmission due in 3764 msec, Queue length 2Type LS ID ADV RTR Seq NO Age Checksum1 192.168.1.12 192.168.1.12 0x80000210 0 0xB196Related Commands
show ospf request-list
Displays a list of all LSAs that are requested by a router.
show ospf summary-address
To display a list of all summary address redistribution information that is configured under an OSPF process, use the show ospf summary-address command in privileged EXEC mode.
show ospf summary-address
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf summary-address).
3.1(1)
This command was changed from show ip ospf summary-address to show ospf summary-address.
Examples
The following shows sample output from the show ospf summary-address command. It shows how to display a list of all summary address redistribution information before a summary address has been configured for an OSPF process with the ID of 5.
hostname# show ospf 5 summary-addressOSPF Process 2, Summary-address10.2.0.0/255.255.0.0 Metric -1, Type 0, Tag 010.2.0.0/255.255.0.0 Metric -1, Type 0, Tag 10Related Commands
show ospf virtual-links
To display the parameters and the current state of OSPF virtual links, use the show ospf virtual-links command in privileged EXEC mode.
show ospf virtual-links
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip ospf virtual-links).
3.1(1)
This command was changed from show ip ospf virtual-links to show ospf virtual-links.
Examples
The following is sample output from the show ospf virtual-links command:
hostname# show ospf virtual-linksVirtual Link to router 192.168.101.2 is upTransit area 0.0.0.1, via interface Vlan101, Cost of using 10Transmit Delay is 1 sec, State POINT_TO_POINTTimer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5Hello due in 0:00:08Adjacency State FULLRelated Commands
show pager
To display the lines that are configured for screen paging, use the show pager command.
show pager
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
This example shows how to display the lines that are configured for screen paging:
fwsm(config)# show pagerpager lines 30Related Commands
clear pager
Restores the pager command default settings.
pager
Sets the default number of lines on a page before the "---more---" prompt appears for Telnet sessions.
show pc conn
To display information about connections, address translation, and local host information that are maintained on the control-point, use the show pc conn command in privileged EXEC mode. This command also shows the number of TCP, UDP, and embryonic connections, as well as those connections most used.
show pc conn [count] | local-host | xlate
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
All the connections that are being processed by the control-point on the FWSM display. These connections are being processed in software on the central CPU, not in hardware.
Examples
The following example shows how to display connection information:
hostname# show pc conn2 in use, 10230 most used
UDP out 14.1.26.199:53 in 10.10.10.119:53 idle 0:00:00 flagsUDP out 14.1.26.199:53 in 10.10.10.119:53 idle 0:00:00 flagsRelated Commands
show xlate
Shows translations.
show conn
Shows connection information.
show local-host
Shows IP addresses of local hosts.
set connection
Sets connection limits.
show perfmon
To capture information about the performance of the FWSM, use the show perfmon command in privileged EXEC configuration mode. To view the output, use the show console-output command.
show perfmon [detail]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
·
·
·
·
—
Command History
Usage Guidelines
The FWSM does not include a serial console port, but some messages are only displayed on a console port, including output from the show perfmon and perfmon commands. Use the show output-console command to view the console buffer, including the show perfmon command output.
The perfmon command allows you to monitor the FWSM performance. The show perfmon command allows you to display the information immediately. The show perfmon detail command allows you to display the connection and xlate setup rates in a new output section.
Examples
This example shows how to display information about the FWSM performance:
hostname# show perfmonhostname# show console-outputContext: my_contextPERFMON STATS: Current AverageXlates 0/s 0/sConnections 0/s 0/sTCP Conns 0/s 0/sUDP Conns 0/s 0/sURL Access 0/s 0/sURL Server Req 0/s 0/sWebSns Req 0/s 0/sTCP Fixup 0/s 0/sTCP Intercept 0/s 0/sHTTP Fixup 0/s 0/sFTP Fixup 0/s 0/sAAA Authen 0/s 0/sAAA Author 0/s 0/sAAA Account 0/s 0/sThis example shows how to display the connection and xlate setup rates.
hostname# show perfmon detailhostname# show console-outputContext: my_contextPERFMON STATS: Current AverageXlates 0/s 0/sConnections 0/s 0/sTCP Conns 0/s 0/sUDP Conns 0/s 0/sURL Access 0/s 0/sURL Server Req 0/s 0/sTCP Fixup 0/s 0/sHTTP Fixup 0/s 0/sFTP Fixup 0/s 0/sAAA Authen 0/s 0/sAAA Author 0/s 0/sAAA Account 0/s 0/sTCP Intercept 0/s 0/sSETUP RATES:Connections for 1 minute = 0/s; 5 minutes = 0/sTCP Conns for 1 minute = 0/s; 5 minutes = 0/sUDP Conns for 1 minute = 0/s; 5 minutes = 0/sXlates for 1 minute = 0/s; 5 minutes = 0/sRelated Commands
perfmon
Displays detailed performance monitoring information.
show console-output
Shows the console buffer.
show pim df
To display the bidirectional DF "winner" for a rendezvous point (RP) or interface, use the show pim df command in privileged EXEC mode.
show pim df [winner] [rp_address | if_name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command also displays the winner metric towards the RP.
Examples
The following is sample output from the show pim df command:
hostname# show df winner insideRP Interface DF Winner Metrics172.16.1.3 Loopback3 172.17.3.2 [110/2]172.16.1.3 Loopback2 172.17.2.2 [110/2]172.16.1.3 Loopback1 172.17.1.2 [110/2]172.16.1.3 inside 10.10.2.3 [0/0]172.16.1.3 inside 10.10.1.2 [110/2]show pim group-map
To display group-to-protocol mapping table, use the show pim group-map command in privileged EXEC mode.
show pim group-map [info-source] [group]
Syntax Description
Defaults
Displays group-to-protocol mappings for all groups.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command displays all group protocol address mappings for the RP. Mappings are learned on the FWSM from different clients.
The PIM implementation on the FWSM has various special entries in the mapping table. Auto-rp group ranges are specifically denied from sparse-mode group range. SSM group range also does not fall under sparse-mode. Link Local multicast groups (224.0.0.0-224.0.0.225, as defined by 224.0.0.0/24) are also denied from the sparse-mode group range. The last entry shows all remaining groups in Sparse-Mode with a given RP.
If multiple RPs are configured with the pim rp-address command, then the appropriate group range is displayed with their corresponding RPs.
Examples
The following is sample output form the show pim group-map command:
hostname# show pim group-mapGroup Range Proto Client Groups RP address Info224.0.1.39/32* DM static 1 0.0.0.0224.0.1.40/32* DM static 1 0.0.0.0224.0.0.0/24* NO static 0 0.0.0.0232.0.0.0/8* SSM config 0 0.0.0.0224.0.0.0/4* SM autorp 1 10.10.2.2 RPF: POS01/0/3,10.10.3.2In lines 1 and 2, Auto-RP group ranges are specifically denied from the sparse mode group range.
In line 3, link-local multicast groups (224.0.0.0 to 224.0.0.255 as defined by 224.0.0.0/24) are also denied from the sparse mode group range.
In line 4, the PIM Source Specific Multicast (PIM-SSM) group range is mapped to 232.0.0.0/8.
The last entry shows that all the remaining groups are in sparse mode mapped to RP 10.10.3.2.
Related Commands
multicast-routing
Enables multicast routing on the FWSM.
pim rp-address
Configures the address of a PIM rendezvous point (RP).
show pim interface
To display interface-specific information for PIM, use the show pim interface command in privileged EXEC mode.
show pim interface [if_name | state-off | state-on]
Syntax Description
Defaults
If you do not specify an interface, PIM information for all interfaces is shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The PIM implementation on the FWSM considers the FWSM itself a PIM neighbor. Therefore, the neighbor count column in the output of this command shows one more than the actual number of neighbors.
Examples
The following example displays PIM information for the inside interface:
hostname# show pim interface insideAddress Interface Ver/ Nbr Query DR DRMode Count Intvl Prior172.16.1.4 inside v2/S 2 100 ms 1 172.16.1.4Related Commands
show pim join-prune statistic
To display PIM join/prune aggregation statistics, use the show pim join-prune statistics command in privileged EXEC mode.
show pim join-prune statistics [if_name]
Syntax Description
if_name
(Optional) The name of an interface. Including this argument limits the displayed information to the specified interface.
Defaults
If an interface is not specified, this command shows the join/prune statistics for all interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
Clear the PIM join/prune statistics with the clear pim counters command.
Examples
The following is sample output from the show pim join-prune statistic command:
hostname# show pim join-prune statisticPIM Average Join/Prune Aggregation for last (1K/10K/50K) packetsInterface Transmitted ReceivedVlan38 0 / 0 / 0 0 / 0 / 0Vlan37 0 / 0 / 0 0 / 0 / 0Vlan36 0 / 0 / 0 0 / 0 / 0Vlan35 0 / 0 / 0 0 / 0 / 0Vlan 0 / 0 / 0 0 / 0 / 0Vlan34 0 / 0 / 0 0 / 0 / 0Vlan22 0 / 0 / 0 0 / 0 / 0Vlan20 0 / 0 / 0 0 / 0 / 0Vlan 0 / 0 / 0 0 / 0 / 0Vlan124 0 / 0 / 0 0 / 0 / 0Vlan136 0 / 0 / 0 0 / 0 / 0Vlan137 0 / 0 / 0 0 / 0 / 0Related Commands
show pim neighbor
To display entries in the PIM neighbor table, use the show pim neighbor command in privileged EXEC mode.
show pim neighbor [count | detail] [interface]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command is used to determine the PIM neighbors known to this router through PIM hello messages. Also, this command indicates that an interface is a designated router (DR) and when the neighbor is capable of bidirectional operation.
The PIM implementation on the FWSM considers the FWSM itself to be a PIM neighbor. Therefore, the FWSM interface is shown in the output of this command. The IP address of the FWSM is indicated by an asterisk next to the address.
Examples
The following is sample output from the show pim neighbor command:
hostname# show pim neighbor insideNeighbor Address Interface Uptime Expires DR pri Bidir10.10.1.1 inside 03:40:36 00:01:41 1 B10.10.1.2* inside 03:41:28 00:01:32 1 (DR) BRelated Commands
show pim range-list
To display range-list information for PIM, use the show pim range-list command in privileged EXEC mode.
show pim range-list [rp_address]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command is used to determine the multicast forwarding mode to group mapping. The output also indicates the rendezvous point (RP) address for the range, if applicable.
Examples
The following is sample output from the show pim range-list command:
hostname# show pim range-listconfig SSM Exp: never Src: 0.0.0.0230.0.0.0/8 Up: 03:47:09config BD RP: 172.16.1.3 Exp: never Src: 0.0.0.0239.0.0.0/8 Up: 03:47:16config BD RP: 172.18.1.6 Exp: never Src: 0.0.0.0239.100.0.0/16 Up: 03:47:10config SM RP: 172.18.2.6 Exp: never Src: 0.0.0.0235.0.0.0/8 Up: 03:47:09Related Commands
show pim group-map
Displays group-to-PIM mode mapping and active RP information.
show pim topology
To display PIM topology table information, use the show pim topology command in privileged EXEC mode.
show pim topology [group] [source]
Syntax Description
Defaults
Topology information for all groups and sources is shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
Use the PIM topology table to display various entries for a given group, (*, G), (S, G), and (S, G)RPT, each with its own interface list.
PIM communicates the contents of these entries through the MRIB, which is an intermediary for communication between multicast routing protocols, such as PIM, local membership protocols, such as Internet Group Management Protocol (IGMP), and the multicast forwarding engine of the system.
The MRIB shows on which interface the data packet should be accepted and on which interfaces the data packet should be forwarded, for a given (S, G) entry. Additionally, the Multicast Forwarding Information Base (MFIB) table is used during forwarding to decide on per-packet forwarding actions.
Note
Examples
The following is sample output from the show pim topology command:
hostname# show pim topologyIP PIM Multicast Topology TableEntry state: (*/S,G)[RPT/SPT] Protocol Uptime InfoEntry flags: KAT - Keep Alive Timer, AA - Assume Alive, PA - Probe Alive,RA - Really Alive, LH - Last Hop, DSS - Don't Signal Sources,RR - Register Received, SR(*,224.0.1.40) DM Up: 15:57:24 RP: 0.0.0.0JP: Null(never) RPF: ,0.0.0.0 Flags: LH DSSoutside 15:57:24 off LI LH(*,224.0.1.24) SM Up: 15:57:20 RP: 0.0.0.0JP: Join(00:00:32) RPF: ,0.0.0.0 Flags: LHoutside 15:57:20 fwd LI LH(*,224.0.1.60) SM Up: 15:57:16 RP: 0.0.0.0JP: Join(00:00:32) RPF: ,0.0.0.0 Flags: LHoutside 15:57:16 fwd LI LHRelated Commands
show mrib route
Displays the MRIB table.
show pim topology reserved
Displays PIM topology table information for reserved groups
show pim topology reserved
To display PIM topology table information for reserved groups, use the show pim topology reserved command in privileged EXEC mode.
show pim topology reserved
Syntax Description
This command has no arguments or keywords.
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Examples
The following is sample output from the show pim topology reserved command:
hostname# show pim topology reservedIP PIM Multicast Topology TableEntry state: (*/S,G)[RPT/SPT] Protocol Uptime InfoEntry flags: KAT - Keep Alive Timer, AA - Assume Alive, PA - Probe Alive,RA - Really Alive, LH - Last Hop, DSS - Don't Signal Sources,RR - Register Received, SR - Sending Registers, E - MSDP External,DCC - Don't Check ConnectedInterface state: Name, Uptime, Fwd, InfoInterface flags: LI - Local Interest, LD - Local Disinterest,II - Internal Interest, ID - Internal Disinterest,LH - Last Hop, AS - Assert, AB - Admin Boundary(*,224.0.0.1) L-Local Up: 00:02:26 RP: 0.0.0.0JP: Null(never) RPF: ,0.0.0.0 Flags:outside 00:02:26 off II(*,224.0.0.3) L-Local Up: 00:00:48 RP: 0.0.0.0JP: Null(never) RPF: ,0.0.0.0 Flags:inside 00:00:48 off IIRelated Commands
show pim topology route-count
To display PIM topology table entry counts, use the show pim topology route-count command in privileged EXEC mode.
show pim topology route-count [detail]
Syntax Description
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
This command displays the count of entries in the PIM topology table. To display more information about the entries, use the show pim topology command.
Examples
The following is sample output from the show pim topology route-count command:
hostname# show pim topology route-countPIM Topology Table SummaryNo. of group ranges = 5No. of (*,G) routes = 0No. of (S,G) routes = 0No. of (S,G)RPT routes = 0Related Commands
show pim traffic
To display PIM traffic counters, use the show pim traffic command in privileged EXEC mode.
show pim traffic
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
Clear the PIM traffic counters with the clear pim counters command.
Examples
The following is sample output from the show pim traffic command:
hostname# show pim trafficPIM Traffic CountersElapsed time since counters cleared: 3d06hReceived SentValid PIM Packets 0 9485Hello 0 9485Join-Prune 0 0Register 0 0Register Stop 0 0Assert 0 0Bidir DF Election 0 0Errors:Malformed Packets 0Bad Checksums 0Send Errors 0Packet Sent on Loopback Errors 0Packets Received on PIM-disabled Interface 0Packets Received with Unknown PIM Version 0Related Commands
show pim tunnel
To display information about the PIM tunnel interfaces, use the show pim tunnel command in privileged EXEC mode.
show pim tunnel [if_name]
Syntax Description
if_name
(Optional) The name of an interface. Including this argument limits the displayed information to the specified interface.
Defaults
If an interface is not specified, this command shows the PIM tunnel information for all interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
PIM register packets are sent through the virtual encapsulation tunnel interface from the source first hop DR router to the RP. On the RP, a virtual decapsulation tunnel is used to represent the receiving interface of the PIM register packets. This command displays tunnel information for both types of interfaces.
Register tunnels are the encapsulated (in PIM register messages) multicast packets from a source that is sent to the RP for distribution through the shared tree. Registering applies only to SM, not SSM and bidirectional PIM.
Examples
The following is sample output from the show pim tunnel command:
hostname# show pim tunnelInterface RP Address Source AddressEncapstunnel0 10.1.1.1 10.1.1.1Decapstunnel0 10.1.1.1 -Related Commands
show processes
To display a list of the processes that are running on the FWSM, use the show processes command in privileged EXEC mode.
show processes [cpu-hog | memory | internals]
Defaults
By default this command displays the processes running on the FWSM.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
·
·
·
·
·
Command History
Usage Guidelines
The show processes command allows you to display a list of the processes that are running on the FWSM.
The command can also help determine what process is using the CPU, with the optional cpu-hog argument. A process is flagged if it is hogging the CPU for more than 100 milliseconds. The show process cpu-hog command displays the following columns when invoked:
•
•
•
Processes are lightweight threads requiring only a few instructions. In the listing, PC is the program counter, SP is the stack pointer, STATE is the address of a thread queue, Runtime is the number of milliseconds that the thread has been running based on CPU clock cycles and is accurate to within one millisecond, SBASE is the stack base address, Stack is the current number of bytes that are used and the total size of the stack, and Process lists the thread's function.
With the scheduler and total summary lines, you can run two consecutive show proccess commands and compare the output to determine:
•
•
The optional memory argument displays the memory allocated by each process, to help track memory usage by process.
The optional internals argument displays the number of invoked calls and giveups. Invoked is the number of times the scheduler has invoked, or ran, the process. Giveups is the number of times the process yielded the CPU back to the scheduler.
Examples
This example shows how to display a list of processes that are running on the FWSM:
hostname(config)# show processesPC SP STATE Runtime SBASE Stack ProcessHsi 00102aa0 0a63f288 0089b068 117460 0a63e2d4 3600/4096 arp_timerLsi 00102aa0 0a6423b4 0089b068 10 0a64140c 3824/4096 FragDBGCHwe 004257c8 0a7cacd4 0082dfd8 0 0a7c9d1c 3972/4096 udp_timerLwe 0011751a 0a7cc438 008ea5d0 20 0a7cb474 3560/4096 dbgtrace<--- More --->...- - - - 638515 - - scheduler- - - - 2625389 - - totalhostname(config)# show processes cpuMAXHOG NUMHOG LASTHOG Process-------------- --------------- --------------- ---------7720 4 110 Dispatch Unit7870 331 1010 Checkheaps(other lines deleted for brevity)6170 1 6170 CTM message handlehostname(config)# show processes memory
Free memory: 845044716 bytes (79%)
Used memory: 228697108 bytes (21%)
------------- ----------------
Total memory: 1073741824 bytes (100%)
PC SP STATE Runtime SBASE Stack Process
Hsi 00102aa0 0a63f288 0089b068 117460 0a63e2d4 3600/4096 arp_timer
Lsi 00102aa0 0a6423b4 0089b068 10 0a64140c 3824/4096 FragDBGC
Hwe 004257c8 0a7cacd4 0082dfd8 0 0a7c9d1c 3972/4096 udp_timerhostname# sho proc internals
Lwe 0011751a 0a7cc438 008ea5d0 20 0a7cb474 3560/4096 dbgtrace
<--- More --->
------------------------------------------------------------
Allocs Allocated Frees Freed Process
(bytes) (bytes)
------------------------------------------------------------
23512 13471545 6 180 *System Main*
0 0 0 0 lu_rx
2 8324 16 19488 vpnlb_thread
(other lines deleted for brevity)
Invoked Giveups Process
1 0 block_diag
19108445 19108445 Dispatch Unit
1 0 CF OIR
1 0 Reload Control Thread
1 0 aaa
2 0 CMGR Server Process
1 0 CMGR Timer Process
2 0 dbgtrace
69 0 557mcfix
19108019 19108018 557poll
2 0 557statspollshow reload
To display the reload status on the FWSM, use the show reload command in privileged EXEC mode.
show reload
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
This command has no usage guidelines.
Examples
The following example shows that a reload is scheduled for 12:00 a.m. (midnight) on Saturday, April 20:
hostname# show reloadReload scheduled for 00:00:00 PDT Sat April 20 (in 12 hours and 12 minutes)Related Commands
show resource acl-partition
To show the number of memory partitions in multiple context mode, the contexts assigned to each partition, and the number of rules used, use the show resource acl-partition command in privileged EXEC mode.
show resource acl-partition [context]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
N/A
N/A
—
—
•
Command History
Examples
The following is sample output from the show resource acl-partition command:
hostname# show resource acl-partitionTotal number of configured partitions = 2Partition #0Mode :exclusiveList of Contexts :bandn, bordersNumber of contexts :2(RefCount:2)Number of rules :0(Max:53087)Partition #1Mode :non-exclusiveList of Contexts :admin, momandpopA, momandpopB, momandpopCmomandpopDNumber of contexts :5(RefCount:5)Number of rules :6(Max:53087)Related Commands
show resource allocation
To show the resource allocation for each resource across all classes and class members, use the show resource allocation command in privileged EXEC mode.
show resource allocation [detail]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
N/A
N/A
—
—
•
Command History
Usage Guidelines
This command shows the resource allocation, but does not show the actual resources being used. See the show resource usage command for more information about actual resource usage.
Examples
The following is sample output from the show resource allocation command. The display shows the total allocation of each resource as an absolute value and as a percentage of the available system resources.
hostname# show resource allocationResource Total % of AvailConns [rate] 35000 35.00%Fixups [rate] 35000 35.00%Syslogs [rate] 10500 35.00%Conns 305000 30.50%Hosts 78842 30.07%IPsec 7 35.00%SSH 35 35.00%Telnet 35 35.00%Xlates 91749 34.99%All unlimited
The following is sample output from the show resource allocation detail command:
hostname# show resource allocation detailResource Origin:A Value was derived from the resource 'all'C Value set in the definition of this classD Value set in default classResource Class Mmbrs Origin Limit Total Total %Conns [rate] default all CA unlimitedgold 1 C 34000 34000 20.00%silver 1 CA 17000 17000 10.00%bronze 0 CA 8500All Contexts: 3 51000 30.00%Fixups [rate] default all CA unlimitedgold 1 DA unlimitedsilver 1 CA 10000 10000 10.00%bronze 0 CA 5000All Contexts: 3 10000 10.00%Syslogs [rate] default all CA unlimitedgold 1 C 6000 6000 20.00%silver 1 CA 3000 3000 10.00%bronze 0 CA 1500All Contexts: 3 9000 30.00%Conns default all CA unlimitedgold 1 C 200000 200000 20.00%silver 1 CA 100000 100000 10.00%bronze 0 CA 50000All Contexts: 3 300000 30.00%Hosts default all CA unlimitedgold 1 DA unlimitedsilver 1 CA 26214 26214 9.99%bronze 0 CA 13107All Contexts: 3 26214 9.99%IPSec default all C 5gold 1 D 5 5 50.00%silver 1 CA 1 1 10.00%bronze 0 CA unlimitedAll Contexts: 3 11 110.00%SSH default all C 5gold 1 D 5 5 5.00%silver 1 CA 10 10 10.00%bronze 0 CA 5All Contexts: 3 20 20.00%Telnet default all C 5gold 1 D 5 5 5.00%silver 1 CA 10 10 10.00%bronze 0 CA 5All Contexts: 3 20 20.00%Xlates default all CA unlimitedgold 1 DA unlimitedsilver 1 CA 23040 23040 10.00%bronze 0 CA 11520All Contexts: 3 23040 10.00%mac-addresses default all C 65535gold 1 D 65535 65535 100.00%silver 1 CA 6553 6553 9.99%bronze 0 CA 3276All Contexts: 3 137623 209.99%Table 27-8 shows each field description.
Related Commands
show resource partition
To view the current, startup, and default partition sizes, use the show resource partition command in global configuration mode.
show resource partition
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
—
—
•
Command History
Usage Guidelines
The show resource partition command lets you plan how to resize memory partitions in multiple context mode using the size command. For more information about memory partitions, see the resource acl-partition command.
Examples
The following is sample output from the show resource partition command:
hostname(config)# show resource partitionBootup CurrentPartition Default Partition ConfiguredNumber Size Size Size-----------+---------+----------+-----------0 19219 19219 192191 19219 19219 192192 19219 19219 192193 19219 19219 192194 19219 19219 192195 19219 19219 192196 19219 19219 192197 19219 19219 192198 19219 19219 192199 19219 19219 1921910 19219 19219 1921911 19219 19219 19219backup tree 19219 19219 19219-----------+---------+----------+-----------Total 249847 249847 249847Total Partition size - Configured size = Available to allocate249847 - 249847 = 0Related Commands
show resource rule
To show the total number of rules available, the default values, current rule allocation, and the absolute maximum number of rules you can allocate per feature, use the show resource rule command in privileged EXEC mode. There are a fixed number of rules available on the FWSM, so you might want to reallocate rules between features depending on usage. Features that use rules include access lists, inspections, AAA, and more.
show resource rule [partition [number]]
Syntax Description
Defaults
If you do not specify the partition keyword, then the global settings are shown
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
3.2(1)
This command was introduced.
4.0(1)
The partition and number arguments were added.
Usage Guidelines
Use the resource rule command to reallocate rules between features; in multiple context mode, the resource rule command sets the allocation globally for all partitions. Use the rule command to set the allocation for a specific partition. The show resource rule command lets you plan your resource allocation. In multiple context mode, this command shows the global setting for each partition. To see the actual rules allocated for a specific partition, use the show resource rule partition command. See the resource acl-partition command for more information about partitions.
You can also use the show np 3 acl count command to view the number of rules currently being used.
Examples
The following is sample output from the show resource rule command in single mode:
hostname(config)# show resource ruleDefault Configured Absolute CLS Rule Limit Limit Max-----------+---------+----------+---------Policy NAT 1843 1843 10000ACL 74188 74188 74188Filter 2764 2764 5528Fixup 4147 4147 10000Est Ctl 460 460 460Est Data 460 460 460AAA 6451 6451 10000Console 1843 1843 3686-----------+---------+----------+---------Total 92156 92156Partition Limit - Configured Limit = Available to allocate92156 - 92156 = 0The following is sample output from the show resource rule partition command in multiple mode:
hostname(config)# show resource rule partition 0Default Configured AbsoluteCLS Rule Limit Limit Max-----------+---------+----------+---------Policy NAT 283 283 833ACL 10633 10633 10633Filter 425 425 850Fixup 1417 1417 2834Est Ctl 70 70 70Est Data 70 70 70AAA 992 992 1984Console 283 283 566-----------+---------+----------+---------Total 14173 14173Partition Limit - Configured Limit = Available to allocate14173 - 14173 = 0Field descriptions for the show resource rule command are shown below:
Related Commands
show resource types
To view the resource types for which the FWSM can limit usage per context, use the show resource types command in privileged EXEC mode.
show resource types
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
The following is sample output from the show resource types command:
hostname# show resource typesRate limited resource types:Conns Connections/secFixups Fixups/secSyslogs Syslogs/secAbsolute limit types:Conns ConnectionsHosts HostsIPSec IPSec Mgmt TunnelsASDM ASDM ConnectionsSSH SSH SessionsTelnet Telnet SessionsXlates XLATE ObjectsMAC Addresses MAC addressesAll All ResourcesRelated Commands
show resource usage
To view the resource usage of the FWSM or for each context in multiple mode, use the show resource usage command in privileged EXEC mode.
show resource usage [context context_name | top n | all | summary | system] [resource {resource_name | all} | detail] [counter counter_name [count_threshold]]
Syntax Description
Defaults
For multiple context mode, the default context is all, which shows resource usage for every context. For single mode, the context name is ignored and the output shows the "context" as "System."
The default resource name is all, which shows all resource types.
The default counter name is all, which shows all statistics.
The default count threshold is 1.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
The following is sample output from the show resource usage context command, which shows the resource usage for the admin context:
hostname# show resource usage context adminResource Current Peak Limit Denied ContextTelnet 1 1 5 0 adminConns 44 55 N/A 0 adminHosts 45 56 N/A 0 adminThe following is sample output from the show resource usage summary command, which shows the resource usage for all contexts and all resources. This sample shows the limits for 6 contexts.
hostname# show resource usage summaryResource Current Peak Limit Denied ContextSyslogs [rate] 1743 2132 12000(U) 0 SummaryConns 584 763 100000(S) 0 SummaryXlates 8526 8966 93400 0 SummaryHosts 254 254 262144 0 SummaryConns [rate] 270 535 42200 1704 SummaryFixups [rate] 270 535 100000(S) 0 SummaryU = Some contexts are unlimited and are not included in the total.S = All contexts are unlimited; system limit is shown.The following is sample output from the show resource usage system command, which shows the resource usage for all contexts, but it shows the system limit instead of the combined context limits:
hostname# show resource usage systemResource Current Peak Limit Denied ContextTelnet 3 5 100 0 SystemSSH 5 7 100 0 SystemConns 40 55 N/A 0 SystemHosts 44 56 N/A 0 SystemThe following is sample output from the show resource usage detail counter all 0 command, which shows all resources, and not just those you can manage:
hostname# show resource usage detail counter all 0Resource Current Peak Limit Denied Contextmemory 1191228 1220084 unlimited 0 adminchunk:aaa 0 0 unlimited 0 adminchunk:aaa_queue 0 0 unlimited 0 adminchunk:acct 0 0 unlimited 0 adminchunk:channels 26 27 unlimited 0 adminchunk:CIFS 0 0 unlimited 0 adminchunk:conn 0 0 unlimited 0 adminchunk:crypto-conn 0 0 unlimited 0 adminchunk:dbgtrace 0 0 unlimited 0 adminchunk:dhcpd-radix 0 0 unlimited 0 adminchunk:dhcp-relay-r 0 0 unlimited 0 adminchunk:dhcp-lease-s 0 0 unlimited 0 adminchunk:dnat 0 0 unlimited 0 adminchunk:ether 0 0 unlimited 0 adminchunk:est 0 0 unlimited 0 adminchunk:est-sip 0 0 unlimited 0 adminchunk:event-mgmt-m 0 0 unlimited 0 adminchunk:event-mgmt-q 0 0 unlimited 0 admin...Telnet 0 0 5 0 adminSSH 0 0 5 0 adminASDM 0 0 5 0 adminIPSec 0 0 5 0 adminSyslogs [rate] 0 0 unlimited 0 adminaaa rate 0 0 unlimited 0 adminurl filter rate 0 0 unlimited 0 adminConns 0 0 20000 0 adminXlates 0 0 unlimited 0 admintcp conns 0 0 unlimited 0 adminHosts 0 0 unlimited 0 adminudp conns 0 0 unlimited 0 adminsmtp-fixups 0 0 unlimited 0 adminConns [rate] 0 0 unlimited 0 adminestablisheds 0 0 unlimited 0 adminpps 0 0 unlimited 0 adminsyslog rate 0 0 unlimited 0 adminbps 0 0 unlimited 0 adminFixups [rate] 0 0 unlimited 0 adminnon tcp/udp conns 0 0 unlimited 0 admintcp-intercept-rate 0 0 unlimited 0 adminglobals 0 0 unlimited 0 adminnp-statics 2 2 unlimited 0 adminstatics 1 1 unlimited 0 adminnats 1 1 unlimited 0 adminace-rules 0 0 N/A 0 adminaaa-user-aces 0 0 N/A 0 adminfilter-rules 0 0 N/A 0 adminest-rules 0 0 N/A 0 adminaaa-rules 0 0 N/A 0 adminconsole-access-rul 1 1 N/A 0 adminpolicy-nat-rules 0 0 N/A 0 adminfixup-rules 32 32 N/A 0 adminaaa-uxlates 0 0 unlimited 0 adminCP-Traffic:IP 0 0 unlimited 0 adminCP-Traffic:ARP 0 0 unlimited 0 adminCP-Traffic:Fixup 0 0 unlimited 0 adminCP-Traffic:NPCP 0 0 unlimited 0 adminCP-Traffic:Unknown 0 0 unlimited 0 adminMac-addresses 0 0 65535 0 admin...Related Commands
show route
To display a default or static route for an interface, use the show route command in privileged EXEC mode.
show route [interface_name ip_address netmask gateway_ip]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
The following is sample output from the show route command:
hostname(config)# show routeC 10.30.10.0 255.255.255.0 is directly connected, outsideC 10.40.10.0 255.255.255.0 is directly connected, insideC 192.168.2.0 255.255.255.0 is directly connected, faillinkC 192.168.3.0 255.255.255.0 is directly connected, statelinkRelated Commands
show route-inject
To display all the routes and NAT pools that have been injected, use the show route-inject command in privileged EXEC mode.
show route-inject
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
Use the show route-inject command in privileged EXEC mode to display the routes and NAT pools that have been injected.
Examples
The following is sample output from the show route-inject command:
hostname(config)# show route-injectRoutes injected:Address Mask Nexthop Proto Weight Vlan ------------------------------------------------------- 20.11.111.11 20.11.111.11 255.255.255.0 NATs injected: Address Mask Nexthop Weight Vlan -------------------------------------------------------- 20.11.111.11 255.255.255.0Related Commands
