Cisco ASA Series User Manual

1-27
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
Total number of SXP bindings = 2
Total number of active bindings = 2
This example shows detailed information, including the security group names, about IP-SGT mappings
that have IPv6 addresses:
hostname# show cts sgt-map ipv6 detail
Active IP-SGT Bindings Information
IP Address Security Group Source
=========================================================================
3330::1 2345 SXP
1280::A8BB:CCFF:FE00:110 Security Tech Business Unit(12345) SXP
IP-SGT Active Bindings Summary
===================================
Total number of SXP bindings = 2
Total number of active bindings = 2
This example shows a summary of the IP-SGT mappings that have IPv6 addresses:
hostname# show cts sgt-map ipv6 brief
Active IP-SGT Bindings Information
IP-SGT Active Bindings Summary
====================================
Total number of SXP bindings = 2
Total number of active bindings = 2
This example shows how to display IP-SGT mappings that fall within a specific subnet:
hostname# show cts sgt-map address 10.10.10.5 mask 255.255.255.255
Active IP-SGT Bindings Information
IP Address SGT Source
============================================================
10.10.10.5 1234 SXP
IP-SGT Active Bindings Summary
============================================
Total number of SXP bindings = 1
Total number of active bindings = 1
To display IP-SGT mappings learned via SXP
Syntax:
show cts sxp sgt-map [peer peer_addr] [sgt value] [address ipv4_addr [netmask
mask]|address ipv6_addr[/prefix]|ipv4|ipv6] [brief|detail]
Description:
This command displays the current IP-SGT mapping database in the SXP module for a particular user
context.
Include the detail keyword to display more information, such as the security group names with the SGT
values (included brackets). If a security group name is not available, only the SGT value is displayed
without the bracket.

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model