Cisco Secure Firewall 3100 User Manual

Monitoring Instance Interfaces
show portmanager switch forward-rules hardware mac-filter
This command shows the internal switch-forwarding rule for two instances with a dedicated physical interface
assigned to each instance. Ethernet 1/2 is assigned to ftd1 and Ethernet 1/1 is assigned to ftd2.
ECMP group 1540 is assigned to ftd1 and ECMP group 1541 is assigned to ftd2.
secfw-3140(local-mgmt)# show portmanager switch forward-rules hardware mac-filter
VLAN SRC_PORT PC_ID SRC_ID DST_PORT PKT_CNT DMAC
1 0 17 0 17 19 29164 0:0:0:0:0:0
2 0 19 0 19 17 67588 0:0:0:0:0:0
3 0 1 0 101 1541 0 a2:5b:83:0:0:15
4 0 1 0 101 1541 8181 ff:ff:ff:ff:ff:ff
5 0 2 0 102 1540 0 a2:5b:83:0:0:18
6 0 2 0 102 1540 431 ff:ff:ff:ff:ff:ff
7 0 17 0 0 0 11133 0:0:0:0:0:0
8 0 17 0 0 0 0 0:0:0:0:0:0
This command shows the internal switch-forwarding rule for two instances with shared physical interfaces
assigned to two instances. Ethernet 1/1 is shared between ftd1 and ftd2.
ECMP group 1540 is assigned to ftd1 and ECMP group 1541 is assigned to ftd2.
MCAST group 4096 is used for replicating broadcast traffic between ftd1 and ftd2.
firepower-3140(local-mgmt)# show portmanager switch forward-rules hardware mac-filter
VLAN SRC_PORT PC_ID SRC_ID DST_PORT PKT_CNT DMAC
1 0 17 0 17 19 2268 0:0:0:0:0:0
2 0 19 0 19 17 4844 0:0:0:0:0:0
3 0 1 0 101 1541 0 a2:5b:83:0:0:9
4 0 1 0 101 4096 546 ff:ff:ff:ff:ff:ff
5 0 1 0 101 1540 0 a2:5b:83:0:0:c
6 0 17 0 0 0 1263 0:0:0:0:0:0
7 0 17 0 0 0 0 0:0:0:0:0:0
This command shows the internal switch-forwarding rule for two instances with shared subinterfaces assigned
to both instances. Ethernet 1/1.2452 is shared between ftd1 and ftd2.
ECMP group 1540 is assigned to ftd1 and ECMP group 1541 is assigned to ftd2.
MCAST group 4097 is used for replicating broadcast traffic between ftd1 and ftd2.
firepower-3140(local-mgmt)# show portmanager switch forward-rules hardware mac-filter
VLAN SRC_PORT PC_ID SRC_ID DST_PORT PKT_CNT DMAC
1 0 17 0 17 19 21305 0:0:0:0:0:0
2 0 19 0 19 17 50976 0:0:0:0:0:0
3 2452 1 0 101 1541 430 a2:5b:83:0:0:f
4 2452 1 0 101 4097 0 ff:ff:ff:ff:ff:ff
5 2452 1 0 101 1540 0 a2:5b:83:0:0:12
6 0 17 0 0 0 11038 0:0:0:0:0:0
7 0 17 0 0 0 0 0:0:0:0:0:0
show portmanager switch ecmp-groups detail
Use this command to list each Instance Ecmp-Vport-Physical port mapping detail.
Multi-Instance Mode for the Secure Firewall 3100
63
Multi-Instance Mode for the Secure Firewall 3100
Monitoring Instance Interfaces

Cisco Secure Firewall 3100 Specifications

General

Brand	Cisco
Model	Secure Firewall 3100
Category	Server
Language	English