Cisco ASA Series

1-22
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
This section contains the following topics:
• Displaying the Cisco TrustSec Configuration for the ASA, page 1-22
• Monitoring SXP Connections, page 1-22
• Monitoring Environment Data, page 1-25
• Monitoring Cisco TrustSec IP-SGT Mappings, page 1-26
• Monitoring the PAC File, page 1-30
Displaying the Cisco TrustSec Configuration for the ASA
Syntax:
show running-config cts
Description:
Specify the show running-config cts command to display the configured default values for the Cisco
TrustSec infrastructure and the SXP commands.
Output:
This example displays the basic Cisco TrustSec configuration settings:
hostname# show running-config cts
!
cts server-group ctsgroup
!
cts sxp enable
cts sxp connection peer 192.16.1.1 password none mode speaker
This example displays the Cisco TrustSec configuration settings, including the default settings:
hostname# show running-config all cts
!
cts server-group ctsgroup
!
no cts sxp enable
no cts sxp default password
cts sxp retry period 120
cts sxp reconcile period 120
Monitoring SXP Connections
Syntax:
show cts sxp connections [peer peer_addr] [local local_addr] [ipv4|ipv6] [status
{on|off|delete-hold-down|pending-on}] [mode {speaker|listener}] [brief]
Description:
Use this command to verify which SXP connections are up and running. This command displays the SXP
connections on the ASA for a particular user context when multi-context mode is used.