Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 927 / 2164

1-23
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
Alternatively you can use the show connection command with the security-group keyword to display
SXP connection information:
show connection [security-group [tag <sgt#> | name <sg_name>]...]
This show connection command displays data for SXP connections when you include the
security-group keyword. To display information for a specific connection, include the security-group
keyword specify an SGT value or security group name for both the source and destination of the
connection. The ASA displays the connection matching the specific SGT values or security group
names.
When you specify the security-group keyword without specifying a source and destination SGT value
or a source and destination security group name, the ASA displays data for all SXP connections.
The ASA displays the connection data in the format security_group_name ( SGT_value ) or just as the
SGT_value when the security group name is unknown.
Note
Security group data is not available for stub connections because stub connection do not go through the
slow path. Stub connections maintain only the information necessary to forward packets to the owner of
the connection.
You can specify a single security group name to display all connections in a cluster; for example, the
following example displays connections matching security-group mktg in all units of the cluster:
hostname# show cluster conn security-group name mktg
...
Output
This example displays a summary of the SXP connections enabled on the ASA:
hostname# show cts sxp connection brief
SXP : Enabled
Highest version : 2
Default password : Set
Default local IP : Not Set
Reconcile period : 120 secs
Retry open period : 10 secs
Retry open timer : Not Running
Total number of SXP connections : 2
-----------------------------------------------------------------------------
peer peer_addr Displays only connections with the matched peer IP address.
local local_addr Displays only connections with the matched local IP address.
ipv4 Displays only IPv4 connections.
ipv6 Displays only IPv6 connections.
status Displays only connections with the matched status.
mode Displays only connections with the matched mode.
brief Displays only the connection summary.