Cisco ASA Series User Manual

1-22
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
This section contains the following topics:
• Displaying the Cisco TrustSec Configuration for the ASA, page 1-22
• Monitoring SXP Connections, page 1-22
• Monitoring Environment Data, page 1-25
• Monitoring Cisco TrustSec IP-SGT Mappings, page 1-26
• Monitoring the PAC File, page 1-30
Displaying the Cisco TrustSec Configuration for the ASA
Syntax:
show running-config cts
Description:
Specify the show running-config cts command to display the configured default values for the Cisco
TrustSec infrastructure and the SXP commands.
Output:
This example displays the basic Cisco TrustSec configuration settings:
hostname# show running-config cts
!
cts server-group ctsgroup
!
cts sxp enable
cts sxp connection peer 192.16.1.1 password none mode speaker
This example displays the Cisco TrustSec configuration settings, including the default settings:
hostname# show running-config all cts
!
cts server-group ctsgroup
!
no cts sxp enable
no cts sxp default password
cts sxp retry period 120
cts sxp reconcile period 120
Monitoring SXP Connections
Syntax:
show cts sxp connections [peer peer_addr] [local local_addr] [ipv4|ipv6] [status
{on|off|delete-hold-down|pending-on}] [mode {speaker|listener}] [brief]
Description:
Use this command to verify which SXP connections are up and running. This command displays the SXP
connections on the ASA for a particular user context when multi-context mode is used.

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model