Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-31
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Cisco Phone Proxy
Troubleshooting the Phone Proxy
Table 1-6 lists the show commands to use with the phone proxy.
Table 1-6 Security Appliance Show Commands to Use with the Phone Proxy
To Use the Command Notes
To show the packets or connections
dropped by the accelerated security path.
show asp drop Use this command to troubleshoot audio
quality issues with the IP phones or other
traffic issues with the phone proxy. In
addition to running this command, get
call status from the phone to check for
any dropped packets or jitter. See
Debugging Information from IP Phones,
page 1-32.
To show the classifier contents of the
accelerated security path for the specific
classifier domain.
show asp table classify domain
domain_name
If the IP phones are not downloading
TFTP files, use this command to check
that the classification rule for the domain
inspect-phone-proxy is set for hosts to
the configured TFTP server under the
phone proxy instance.
If the IP phones are failing to register, use
this command to make sure there is a
classification rule for the domain
app-redirect set for the IP phones that
cannot register.
To show the connections that are to the
ASA or from the ASA, in addition to
through-traffic connections.
show conn all If you are experiencing problems with
audio, use this command to make sure
that there are connections opened from
the IP phone to the media termination
address.
Note Use the show conn command
with following options to display
TFTP connections that have
replicated (unused) connections:
hostname# show conn |
include p
The output for the TFTP connections
should have a “p” flag at the end:
UDP out 64.169.58.181:9014 in
192.168.200.101:39420 idle 0:01:51
bytes 522 flags p
Using this command shows that the phone
proxy has connections that are going
through “inspect-phone-proxy”, which
inspects TFTP connections. Using this
command verifies that the TFTP requests
are being inspected because the p flag is
there.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English