-
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Command Reference, 4.0
-
About This Guide
-
Using the Command Line Interface
- A through B Commands
- C Commands
- D through F Commands
- G through I Commands
- J through L Commands
- M through O Commands
- P though R Commands
-
S Commands
-
same-security-traffic -- show asdm sessions
-
show asp drop -- show curpriv
-
show debug -- show ipv6 traffic
-
show isakmp sa -- show route
-
show running-config -- show running-config isakmp
-
show running-config logging -- show running-config vpn-sessiondb
-
show service-policy -- show xlate
-
shun -- sysopt uauth allow-http-cache
-
- T through Z Commands
-
Feedback
Table Of Contents
show running-config logging through show running-config xlate-bypass Commands
show running-config logging rate-limit
show running-config mac-address-table
show running-config management-access
show running-config monitor-interface
show running-config multicast-routing
show running-config nat-control
show running-config object-group
show running-config policy-map
show running-config prefix-list
show running-config resource partition
show running-config route-inject
show running-config same-security-traffic
show running-config service-policy
show running-config snmp-server
show running-config sunrpc-server
show running-config tftp-server
show running-config tunnel-group
show running-config url-server
show running-configuration vpn-sessiondb
show running-config xlate-bypass
show running-config logging through show running-config xlate-bypass Commands
show running-config logging
To display all currently running logging configuration settings, use the show running-config logging command in privileged EXEC mode.
show running-config [all] logging [level | disabled]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Examples
The following is an example of the show running-config logging disabled command:
hostname#show running-config logging disabledno logging message 720067Related Commands
show logging
Shows the current contentsw of the log buffer and other log configuration settings.
show running-config logging rate-limit
To display messages that were disallowed because the current rate limit was exceeded, use the show running config logging rate-limit command.
show running-config logging rate-limit
Syntax Description
This command has no arguments or keywords.
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
1.1(1)
This command was introduced on the FWSM.
3.1
The show logging rate-limit command was renamed show running-config logging rate-limit.
Usage Guidelines
After the information is cleared, nothing more displays until the hosts reestablish their connections.
Examples
The following example shows how to display the disallowed messages:
fwsm/context_name(config)# show logging rate-limitRelated Commands
show running-config mac-address-table
To view the mac-address-table static and mac-address-table aging-time configuration in the running configuration, use the show running-config mac-address-table command in privileged EXEC mode.
show running-config [all] mac-address-table
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
—
•
•
•
—
Command History
Examples
The following is sample output from the show running-config mac-learn command:
hostname# show running-config mac-address-tablemac-address-table aging-time 50mac-address-table static inside1 0010.7cbe.6101Related Commands
show running-config mac-learn
To view the mac-learn configuration in the running configuration, use the show running-config mac-learn command in privileged EXEC mode.
show running-config [all] mac-learn
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
—
•
•
•
—
Command History
2.2(1)
This command was introduced.
3.1(1)
This command was changed from show mac-learn.
Examples
The following is sample output from the show running-config mac-learn command:
hostname# show running-config mac-learnmac-learn disableRelated Commands
show running-config mac-list
To display a list of MAC addresses previously specified in a mac-list command with the indicated MAC list number, use the show running-config mac-list command in privileged EXEC mode.
show running-config mac-list id
Syntax Description
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
Usage Guidelines
The show running-config aaa command displays the mac-list command statements as part of the AAA configuration.
Examples
The following example shows how to display all MAC address lists:
hostname(config)# show running-config mac-listmac-list adc permit 00a0.ca5d.0282 ffff.ffff.ffffmac-list adc deny 00a1.ca5d.0282 ffff.ffff.ffffmac-list ac permit 0050.54ff.0000 ffff.ffff.0000mac-list ac deny 0061.54ff.b440 ffff.ffff.ffffmac-list ac deny 0072.54ff.b440 ffff.ffff.ffffThe following example shows how to display a MAC address list with the id equal to adc:
hostname(config)# show running-config mac-list adcmac-list adc permit 00a0.ca5d.0282 ffff.ffff.ffffmac-list adc deny 00a1.ca5d.0282 ffff.ffff.ffffRelated Commands
show running-config management-access
To display the name of the internal interface configured for management access, use the show running-config management-access command in privileged EXEC mode.
show running-config management-access
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Usage Guidelines
The management-access command lets you define an internal management interface using the IP address of the firewall interface specified in mgmt_if. (The interface names are defined by the nameif command and displayed in quotes, " ", in the output of the show interface command.)
Examples
The following example shows how to configure a firewall interface named "inside" as the management access interface and display the result:
hostname# management-access insidehostname# show running-config management-accessmanagement-access insideRelated Commands
show running-config mgcp-map
To show the MGCP maps that have been configured, use the show running-config mgcp-map command in privileged EXEC mode.
show running-config mgcp-map map_name
Syntax Description
.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
The show running-config mgcp-map command displays the MGCP maps that have been configured.Examples
The following is sample output from the show running-config mgcp-map command:
hostname# show running-config mgcp-map mgcp-policy!mgcp-map mgcp-policycall-agent 10.10.11.5 101call-agent 10.10.11.6 101call-agent 10.10.11.7 102call-agent 10.10.11.8 102gateway 10.10.10.115 101gateway 10.10.10.116 102gateway 10.10.10.117 102command-queue 150Related Commands
show running-config monitor-interface
To display all monitor-interface commands in the running configuration, use the show running-config monitor-interface command in privileged EXEC mode.
show running-config [all] monitor-interface
Syntax Description
all
(Optional) Shows all monitor-interface commands, including the commands you have not changed from the default.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
The monitor-interface command is disabled on all virtual interfaces by default. You need to use the all keyword with this command to view the default configuration.
Examples
The following is sample output from the show running-config monitor-interface command. The first time the command is entered without the all keyword, so only the interface that has monitoring enabled appears in the output.
hostname# show running-config monitor-interfacemonitor-interface outsidehostname#hostname# show running-config all monitor-interfaceno monitor-interface insidemonitor-interface outsidehostname#Related Commands
show running-config mroute
To display the static multicast route table in the configuration use the show running-config mroute command in privileged EXEC mode.
show running-config mroute
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output from the show running-config mroute command:
hostname# show running-config mroutemroute 10.1.1.0 255.255.255.0 inside 3Related Commands
show running-config mtu
To display the current maximum transmission unit block size, use the show running-config mtu command in privileged EXEC mode.
show running-config mtu [interface_name]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
—
•
•
•
—
Command History
1.1(1)
This command was introduced.
3.1(1)
This command was changed from show mtu.
Examples
The following is sample output from the show running-config mtu command:
hostname# show running-config mtumtu outside 1500mtu inside 1500mtu dmz 1500hostname# show running-config mtu outsidemtu outside 1500Related Commands
clear configure mtu
Clears the configured maximum transmission unit values on all interfaces.
mtu
Specifies the maximum transmission unit for an interface.
show running-config multicast-routing
To display the multicast-routing command, if present, in the running configuration, use the show running-config multicast-routing command in privileged EXEC mode.
show running-config multicast-routing
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The show running-config multicast-routing command displays the multicast-routing command in the running configuration. Enter the clear configure multicast-routing command to remove the multicast-routing command from the running configuration.
Examples
The following is sample output from the show running-config multicast-routing command:
hostname# show running-config multicast-routingmulticast-routingRelated Commands
clear configure multicast-routing
Removes the multicast-routing command from the running configuration.
multicast-routing
Enables multicast routing on the FWSM.
show running-config name
To display a list of names associated with IP addresses (configured with the name command), use the show running-config name command in privileged EXEC mode.
show running-config name
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show name command was introduced.
3.1(1)
This command was changed to show running-config name.
Examples
This example shows how to display a list of names associated with IP addresses:
hostname# show running-config namename 192.168.42.3 fwsm_insidename 209.165.201.3 fwsm_outsideRelated Commands
clear configure name
Clears the list of names from the configuration.
name
Associates a name with an IP address.
show running-config nameif
To show the interface name configuration in the running configuration, use the show running-config nameif command in privileged EXEC mode.
show running-config nameif [mapped_name]
Syntax Description
mapped_name
(Optional) In multiple context mode, identifies the mapped name if it was assigned using the allocate-interface command.
Defaults
If you do not specify an interface, this command shows the interface name configuration for all interfaces.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show nameif command was introduced.
3.1(1)
This command was changed to show running-config nameif.
Usage Guidelines
In multiple context mode, if you mapped the interface ID in the allocate-interface command, you can only specify the mapped name in a context.
This display also shows the security-level command configuration.
Examples
The following is sample output from the show running-config nameif command:
hostname(config-if)# show running-config nameif!interface Vlan22nameif insidesecurity-level 100!interface Vlan35nameif testsecurity-level 0!Related Commands
show running-config names
To display the IP address-to-name conversions, use the show running-config names command in privileged EXEC mode.
show running-config names
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show names command was introduced.
3.1(1)
This command was changed to show running-config names.
Usage Guidelines
Use with the names command.
Examples
The following example shows how to display the IP address-to-name conversion:
hostname(config-if)# show running-config namesname 192.168.42.3 sa_insidename 209.165.201.3 sa_outsideRelated Commands
show running-config nat
To display a pool of global IP addresses that are associated with a network, use the show running-config nat command in privileged EXEC mode.
show running-config nat [interface_name] [nat_id]
Syntax Description
interface_name
(Optional) Name of the network interface.
nat_id
(Optional) ID of the group of host or networks.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
2.2(1)
This command was modified to support UDP maximum connections for local hosts.
3.1(1)
This command was changed from show nat.
Usage Guidelines
This command displays the maximum connection value for the UDP protocol. Every time the UPD maximum connection value is not set, the value will be displayed as 0 by default and will not be applied.
Examples
The following example shows how to display a pool of global IP addresses that are associated with a network:
hostname# show running-config natnat (inside) 1001 10.7.2.0 255.255.255.224 0 0nat (inside) 1001 10.7.2.32 255.255.255.224 0 0nat (inside) 1001 10.7.2.64 255.255.255.224 0 0nat (inside) 1002 10.7.2.96 255.255.255.224 0 0nat (inside) 1002 10.7.2.128 255.255.255.224 0 0nat (inside) 1002 10.7.2.160 255.255.255.224 0 0nat (inside) 1003 10.7.2.192 255.255.255.224 0 0nat (inside) 1003 10.7.2.224 255.255.255.224 0 0Related Commands
clear configure nat
Removes the NAT configuration.
nat
Associates a network with a pool of global IP addresses.
show running-config nat-control
To show the NAT configuration requirement, use the show running-config nat-control command in privileged EXEC mode.
show running-config nat-control
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Examples
The following is sample output from the show running-config nat-control command:
hostname# show running-config nat-controlno nat-controlRelated Commands
show running-config object-group
To display the current object groups, use the show running-config object-group command in privileged EXEC mode.
show running-config [all] object-group [protocol | service | network | icmp-type | id obj_grp_id]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
3.1(1)
This command was changed from show object-group.
Examples
The following is sample output from the show running-config object-group command:
hostname# show running-config object-groupobject-group protocol proto_grp_1protocol-object udpprotocol-object tcpobject-group service eng_service tcpport-object eq smtpport-object eq telnetobject-group icmp-type icmp-allowedicmp-object echoicmp-object time-exceededRelated Commands
show running-config pager
To show the number of lines on a page set to displayin a Telnet session before the "---More---" prompt appears in the running configuration, use the show running-config pager command in privileged EXEC mode.
show running-config pager
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The show running-config pager commandshows the number of lines on a page set to displayin a Telnet session before the "---More---" prompt appears in the running configuration in global configuration mode.
Examples
The following is sample output from the show running-config pager command:
hostname# show running-config pagerpager lines 24Related Commands
show running-config passwd
To show the encrypted login passwords, use the show running-config passwd command in privileged EXEC mode.
show running-config {passwd | password}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
1.1(1)
The show passwd command was introduced.
3.1(1)
This command was changed to show running-config passwd.
Usage Guidelines
The password is saved to the configuration in encrypted form, so you cannot view the original password after you enter it. The password displays with the encrypted keyword to indicate that the password is encrypted.
Examples
The following is sample output from the show running-config passwd command:
hostname# show running-config passwdpasswd 2AfK9Kjr3BE2/J2r encryptedRelated Commands
show running-config pim
To display the PIM commands in the running configuration, use the show running-config pim command in privileged EXEC mode.
show running-config pim
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The show running-config pim command displays the pim commands entered in global configuration mode. It does not show the pim commands entered in interface configuration mode. To see the pim commands entered in interface configuration mode, enter the show running-config interface command.
Examples
The following is sample output from the show running-config pim command:
hostname# show running-config pimpim old-register-checksumpim spt-threshold infinityRelated Commands
show running-config policy-map
To display all the policy-map configurations or the default policy-map configuration, use the show running-config policy-map command in privileged EXEC mode.
show running-config [all] policy-map [policy_map_name | type inspect [protocol]]
Syntax Description
Defaults
Omitting the all keyword displays only the explicitly configured policy-map configuration.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
3.1(1)
This command was introduced.
4.0(1)
The type inspect keywords were added.
Usage Guidelines
Specifying the all keyword displays the default policy-map configuration as well as the explicitly configured policy-map configuration.
Examples
The following is sample output from the show running-config policy-map command:
hostname# show running-config policy-map!policy-map localmap1description this is a test.class firstclasspriorityids promiscuous fail0closeset connection random-seq# enableclass class-default!Related Commands
Command
Description
policy-map
Configures a policy; that is, an association of a traffic class and one or more actions.
clear configure policy-map
Removes the entire policy configuration.
show running-config prefix-list
To display the prefix-list command in the running configuration, use the show running-config prefix-list command in privileged EXEC mode.
show running-config prefix-list
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The prefix-list description commands always appear before their associated prefix-list commands in the running configuration. It does not matter what order you entered them.
Examples
The following is sample output from the show running-config prefix-list command:
hostname# show running-config prefix-list!prefix-list abc description A sample prefix listprefix-list abc seq 5 permit 192.168.0.0/8 le 24prefix-list abc seq 10 deny 10.0.0.0/8 le 32!Related Commands
clear configure prefix-list
Clears the prefix-list commands from the running configuration.
show running-config privilege
To display the privileges for a command or a set of commands, use the show running-config privilege command in privileged EXEC mode.
show running-config [all] privilege [all | command command | level level]
Syntax Description
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
1.1(1)
The show privilege command was introduced.
3.1(1)
This command was changed from show privilege.
Usage Guidelines
Use the show running-config privilege command to view the current privilege level.
Examples
hostname(config)# show running-config privilege level 0privilege show level 0 command checksumprivilege show level 0 command curprivprivilege configure level 0 mode enable command enableprivilege show level 0 command historyprivilege configure level 0 command loginprivilege configure level 0 command logoutprivilege show level 0 command pagerprivilege clear level 0 command pagerprivilege configure level 0 command pagerprivilege configure level 0 command quitprivilege show level 0 command versionRelated Commands
show running-config prompt
To view the customized CLI prompt, use the show running-config prompt command in privileged EXEC mode.
show running-config prompt
Syntax Description
This command has no arguments or keywords.
Defaults
The default prompt is the hostname. In multiple context mode, the hostname is followed by the current context name (hostname/context).
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
The following is sample output from the show running-config prompt command::
hostname# show running-config promptprompt hostname contextRelated Commands
clear configure prompt
Clears the configured prompt.
prompt
Creates a customized prompt.
show running-config regex
To display all regular expressions configured with the regex command, use the show running-config regex command in privileged EXEC mode.
show running-config regex
Syntax Description
This command has no arguments or keywords.
Defaults
No default behaviors or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output of the show running-config regex command, which shows all regular expressions:
hostname# show running-config regexregex test "string"Related Commands
show running-config resource partition
To view the current memory partition configuration, use the show running-config resource partition command in privileged EXEC mode.
show running-config [all] resource partition [number]
Syntax Description
Defaults
Shows the configuration for all partitions if you do not specify a number.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
Examples
The following is sample output from the show running-config resource partition command:
hostname(config)# show running-config resource partitionresource partition 0size 40000resource partition 1size 40000Related Commands
show running-config rip
To display the information about the RIP configuration, use the show running-config rip command in privileged EXEC mode.
show running-config [all] rip [interface_name]
Syntax Description
all
(Optional) Shows all RIP commands, including the commands you have not changed from the default.
interface_name
(Optional) Displays only the RIP commands for the specified interface.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show rip).
3.1(1)
This command was changed from show rip to show running-config rip.
Examples
This example shows how to display RIP information:
hostname# show running-config riprip outside passive version 2 authentication md5 thisisakey 2rip outside default version 2 authentication md5 thisisakey 2rip inside passive version 1rip dmz passive version 2Related Commands
clear configure rip
Clears all RIP commands from the running configuration.
debug rip
Displays debug information for RIP.
rip
Configures RIP on the specified interface.
show running-config route
To display the route commands in the running configuration, use the show running-config route command in privileged EXEC mode.
show running-config [all] route
Syntax Description
No default behavior or values.
Defaults
This command has no arguments or keywords.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced (as show route).
3.1(1)
This command was changed from show route to show running-config route.
Examples
The following is sample output from the show running-config route command:
hostname# show running-config routeroute outside 10.30.10.0 255.255.255.0 1Related Commands
show running-config route-inject
To display the route-injection running configuration, use the show running-config route-inject command in privileged EXEC mode.
show running-config route-inject
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
Use the show running-config route-inject command in privileged EXEC mode to display the route-injection running configuration.
Examples
The following is sample output from the show running-config route-inject command:
hostname(config)# show running-config route-injectRoutes injected:Address Mask Nexthop Proto Weight Vlan -------------------------------------------------------hostname(config)# interface vlan20hostname(config-if)# nameif outsidehostname(config-if)# ip address 20.22.211.21 255.255.255.0 standby 20.22.211.22hostname(config-if)# exithostname(config)# access-list acl1 standard permit 23.10.143.20 255.255.255.252hostname(config)# global (outside) 10 23.10.143.20-23.10.143.23 netmask 255.255.255.0hostname(config)# global (outside) 10 23.10.143.40-23.10.143.45 netmask 255.255.255.0hostname(config)# route-injecthostname(config-route-inject)# redistribute nat access-list acl1 interface outside--------------------------------------------------------Related Commands
show running-config route-map
To display the information about the route map configuration, use the show running-config route-map command in privileged EXEC mode.
show running-config route-map [map_tag]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
1.1(1)
This command was introduced (as show route-map).
3.1(1)
This command was changed from show route-map to show running-config route-map.
Usage Guidelines
To show all route-maps defined in the configuration, use the show running-config route-map command. To show individual route-maps by name, use the show running-config route-map map_tag command, where map_tag is the name of the route-map. Multiple route maps may share the same map tag name.
Examples
The following is sample output from the show running-config route-map command:
hostname# show running-config route-maproute-map maptag1 permit sequence 10set metric 5match metric 3route-map maptag1 permit sequence 12set metric 5match interface backupmatch metric 3route-map maptag2 deny sequence 10match interface dmzRelated Commands
show running-config router
To display the global commands in the router configuration, use the show running-config router command in privileged EXEC mode.
show running-config [all] router [ospf [process_id]]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
1.1(1)
This command was introduced (as show ip router).
3.1(1)
This command was changed from show router to show running-config router.
Examples
The following is sample output from the show running-config router command:
hostname# show running-config router ospf 1router ospf 1log-adj-changes detailignore lsa mospfno compatible rfc1583distance ospf external 200timers spf 10 20timers lsa-group-pacing 60Related Commands
clear configure router
Clears all router commands from the running configuration.
show running-config same-security-traffic
To display the same-security interface communication, use the show running-config same-security-traffic command in privileged EXEC mode.
show running-config same-security-traffic {inter-interface | intra-interface}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output from the show running-config same-security-traffic command:
hostname# show running-config same-security-trafficsame-security-traffic permit inter-interfaceRelated Commands
same-security-traffic
Permits communication between interfaces with equal security levels.
show running-config service
To display the service configuration, use the show running-config service command in privileged EXEC mode.
show running-config [all] service
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
3.1(1)
This command was changed from show service.
Examples
This command shows how to display the system services:
hostname# show running-config service
hostname#Related Commands
show running-config service-policy
To display all currently running service policy configurations, use the show runnig-config service-policy command in privileged EXEC mode.
show running-config [all] service-policy
Syntax Description
all
(Optional) Shows all service policy commands, including the commands you have not changed from the default.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output of the show running-config service-policy command:
hostname#show running-config service-policyRelated Commands
show running-config snmp-map
To show the SNMP maps that have been configured, use the show running-config snmp-map command in privileged EXEC mode.
show running-config snmp-map map_name
Syntax Description
.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
The show running-config snmp-map command displays the SNMP maps that have been configured.Examples
The following is sample output from the show running-config snmp-map command:
hostname# show running-config snmp-map snmp-policy!snmp-map snmp-policydeny version 1!Related Commands
show running-config snmp-server
To display all currently running SNMP server configurations, use the show runnig-config snmp-server command in global configuration mode.
show running-config [default] snmp-server
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
·
·
·
·
Command History
Examples
The following is an example of the show running-config snmp-server command:
service resetoutsideshow running-config snmp-serverRelated Commandshostname# show running-config servi
snmp-server
Configures the SNMP server.
clear snmp-server
Clears the SNMP server configuration.
show snmp-server statistics
Displays SNMP server configuration.
show running-config ssh
To show the SSH commands in the current configuration, use the show running-config ssh command in privileged EXEC mode.
show running-config [default] ssh [timeout | version]
show run [default] ssh [timeout]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
3.1(1)
The command was changed from the show ssh command to the show running-config ssh command.
Usage Guidelines
This command shows the current ssh configuration. To display only the SSH session timeout value, use the timeout option. To see a list of active SSH sessions, use the show ssh sessions command.
Examples
The following example displays the SSH session timeout:
hostname# show running-config timeoutssh timeout 5 minuteshostname#Related Commands
show running-config static
To display all static commands in the configuration, use the show running-config static command in privileged EXEC mode.
show running-config static
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
2.2(1)
This command was modified to support UDP maximum connections for local hosts.
3.1(1)
This command was changed from show static.
Usage Guidelines
This command displays the maximum connections value for the UDP protocol. If the UDP maximum connections value is "0" or not set, the limit enforcement is disabled.
Examples
The following example shows how to display all static commands in the configuration:
hostname# show running-config staticstatic (inside,outside) 192.150.49.91 10.1.1.91 netmask 255.255.255.255static (inside,outside) 192.150.49.200 10.1.1.200 netmask 255.255.255.255 tcp 255 0
Note
Related Commands
show running-config sunrpc-server
To display the information about the SunRPC configuration, use the show running-config sunrpc-server command in privileged EXEC mode.
show running-config sunrpc-server
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output from the show running-config sunrpc-server command:
hostname# show running-config sunrpc-serverinside 30.26.0.23 255.255.0.0 service 2147483647 protocol TCP port 2222 timeout 0:03:00Related Commands
show running-config sysopt
To show the sysopt command configuration in the running configuration, use the show running-config sysopt command in privileged EXEC mode.
show running-config [all] sysopt
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
3.1(1)
This command was changed from show sysopt.
Examples
The following is sample output from the show running-config sysopt command:
hostname# show running-config sysoptno sysopt connection timewaitsysopt connection tcpmss 1200sysopt connection tcpmss minimum 400no sysopt nodnsalias inboundno sysopt nodnsalias outboundno sysopt radius ignore-secretsysopt connection permit-ipsecRelated Commands
show running-config telnet
To display the current list of IP addresses that are authorized to use Telnet connections to the FWSM, use the show running-config telnet command in privileged EXEC mode. You can also use this command to display the number of minutes that a Telnet session can remain idle before being closed by the FWSM.
show running-config telnet [timeout]
Syntax Description
timeout
(Optional) Displays the number of minutes that a Telnet session can be idle before being closed by the FWSM.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
This example shows how to display the current list of IP addresses that are authorized for use by Telnet connections to the FWSM:
hostname# show running-config telnet2003 Jul 15 14:49:36 %MGMT-5-LOGIN_FAIL:User failed tolog in from 209.165.200.225 through Telnet2003 Jul 15 14:50:27 %MGMT-5-LOGIN_FAIL:User failed to log in from 209.165. 200.225through TelnetRelated Commands
clear configure telnet
Removes the Telnet connection from the configuration.
telnet
Adds Telnet access to the console and sets the idle timeout.
show running-config terminal
To display the current terminal settings, use the show running-config terminal command in privileged EXEC mode.
show running-config terminal
Syntax Description
This command has no keywords or arguments.
Defaults
The default display width is 80 columns.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
1.1(1)
The show terminal command was introduced.
3.1(1)
This command was changed to show running-config terminal.
Examples
The following example clears the page length setting:
hostname# show running-config terminalWidth = 80, no monitorRelated Commands
clear configure terminal
Clears the terminal display width setting.
terminal
Sets the terminal line parameters.
terminal width
Sets the terminal display width.
show running-config tftp-server
To display the default TFTP server address and directory, use the show running-config tftp-server command in global configuration mode.
show running-config tftp-server
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
•
•
•
Command History
Examples
This example shows how to display the IP/IPv6 address of the default TFTP server and the directory of the configuration file:
hostname(config)# show running-config tftp-servertftp-server inside 10.1.1.42 /temp/config/test_configRelated Commands
show running-config timeout
To display the timeout value of all protocols, or just a specific one, use the show running-config timeout command in privileged EXEC mode.
show running-config [all] timeout [protocol]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
This command was introduced.
3.1(1)
This command was changed from show timeout.
Examples
This example shows how to display the timeout values for the system:
hostname(config)# show timeouttimeout xlate 3:00:00timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 rpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00timeout uauth 0:00:00 absoluteRelated Commands
clear configure timeout
Restores the default idle time durations.
timeout
Sets the maximum idle time duration.
show running-config tunnel-group
To display tunnel group information about all or a specified tunnel group and tunnel-group attributes, use the show running-config tunnel-group command in global configuration or privileged EXEC mode.
show running-config [all] tunnel-group [name [general-attributes | ipsec-attributes | ppp-attributes]]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Global configuration
•
•
Privileged EXEC
•
•
Command History
Examples
The following example entered in global configuration mode, displays the current configuration for all tunnel groups:
hostname(config)# show running-config tunnel-grouptunnel-group 209.165.200.225 type IPSec_L2Ltunnel-group 209.165.200.225 ipsec-attributespre-shared-key xyzxhostname(config)#Related Commands
show running-config url-block
To show the configuration for buffers and memory allocation used by URL filtering, use the show running-config url-block command in privileged EXEC mode.
show running-config url-block [ block | url-mempool | url-size ]
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show url-block command was introduced.
3.1(1)
This command was changed from show url-block.
Usage Guidelines
The show running-config url-block command displays the configuration for buffers and memory allocation used by URL filtering.Examples
The following is sample output from the show running-config url-block command:
hostname# show running-config url-block!url-block block 56!Related Commands
show running-config url-cache
To show the cache configuration used by URL filtering, use the show running-config url-cache command in privileged EXEC mode.
show running-config url-cache
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show url-cache command was introduced.
3.1(1)
This command was changed from show url-cache.
Usage Guidelines
The show running-config url-cache command displays the cache configuration used by URL filtering.Examples
The following is sample output from the show running-config url-cache command:
hostname# show running-config url-cache!url-cache src_dst 128!Related Commands
show running-config url-server
To show the URL filtering server configuration, use the show running-config url-server command in privileged EXEC mode.
show running-config url-server
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
1.1(1)
The show url-server command was introduced.
3.1(1)
This command was changed from show url-server.
Usage Guidelines
The show running-config url-server command displays the URL filtering server configuration.Examples
The following is sample output from the show running-config url-server command:
hostname# show running-config url-server!url-server (perimeter) vendor websense host 10.0.1.1!Related Commands
show running-config username
To display the running configuration for a particular user, use the show running-config username command in privileged EXEC mode with the username appended. To display the running configuration for all users, use this command without a username.
show running-config [all] username [name] [attributes]]
Syntax Description
attributes
Displays the specific AVPs for the user(s)
all
[Optional] Displays all username commands, including the commands you have not changed from the default.
name
Provides the name of the user.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Global configuration
•
—
•
—
—
Username
•
—
•
—
—
Command History
1.1(1)
The show username command was introduced.
3.1(1)
This command was changed from show username.
Examples
The following example shows the use of the show running-config username command for a user named anyuser:
hostname# show running-config username anyuserusername anyuser password .8T1d6ik58/lzXS5 encrypted privilege 3username anyuser attributesvpn-group-policy DefaultGroupPolicyvpn-idle-timeout 10vpn-session-timeout 120vpn-tunnel-protocol IPSecRelated Commands
clear config username
Clears the username database.
username
Adds a user to the FWSM database.
username attributes
Lets you configure AVPs for specific users.
show running-config virtual
To display the IP address of the FWSM virtual server, use the show running-config virtual command in privileged EXEC mode.
show running-config [all] virtual
Syntax Description
Defaults
Omitting the all keyword displays the explicitly configured IP address of the current virtual server or servers.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
1.1(1)
The show virtual command was introduced.
3.1(1)
This command was changed from show virtual.
Usage Guidelines
You must be in privileged EXEC mode to use this command.
Examples
The following example shows the output of the show running-config virtual command when a virtual HTTP server has already been configured:
hostname(config)# show running-config virtualvirtual http 192.168.201.1Related Commands
clear configure virtual
Removes virtual command statements from the configuration.
virtual
Displays the address for authentication virtual servers.
show running-configuration vpn-sessiondb
To display the current set of configured vpnsessiondb commands, use the show running-configuration vpn-sessiondb command in privileged EXEC mode.
show running-configuration [all] vpn-sessiondb
Syntax Description
all
(Optional) Displays all vpn-sessionddb commands, including the commands you have not changed from the default
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
—
—
•
Command History
Usage Guidelines
As of Release 7.0, this command displays only the VPN maximum sessions limit, if configured.
Examples
The following is sample output for the show running-configuration vpn-sessiondb command:
hostname# show running-configuration vpn-sessiondbRelated Commands
show running-config xlate-bypass
To show the xlate bypass configuration, use the show running-config xlate-bypass command in privileged EXEC mode. To disable xlate bypass, use the no form of this command.
show running-config [all] xlate-bypass
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output from the show running-config xlate-bypass command:
hostname# show running-config xlate-bypassxlate-bypassRelated Commands
