Cisco IOS IP Command Reference, Volume 1 of 4: Addressing and Services, Release 12.3 T
IP Addressing and Services Commands: show ip nhrp through synguard

Table Of Contents

show ip nhrp

show ip nhrp traffic

show ip redirects

show ip route dhcp

show ip slb conns

show ip slb dfp

show ip slb reals

show ip slb serverfarms

show ip slb stats

show ip slb sticky

show ip slb vservers

show ip snat

show ip sockets

show ip traffic

show ip wccp

show ip wccp web-caches

show standby

show standby delay

show standby redirect

show tcp statistics

show time-range ipc

show track

show vrrp

show vrrp interface

standby authentication

standby delay minimum reload

standby ip

standby mac-address

standby mac-refresh

standby name

standby preempt

standby priority

standby redirects

standby sso

standby timers

standby track

standby use-bia

standby version

start-forwarding-agent

sticky (virtual server)

subnet prefix-length

synguard (virtual server)


show ip nhrp

To display the Next Hop Resolution Protocol (NHRP) cache, use the show ip nhrp EXEC command.

show ip nhrp [detail | purge] | [type number [detail]] | [dynamic | incomplete | nhs | static [type number] [detail]]

Syntax Description

detail

(Optional) Displays detailed information about NHRP cache.

purge

(Optional) Displays NHRP cache purge information.

type number

(Optional) Displays the interface type and number in the NHRP cache. See Table 26 for types, number ranges, and descriptions.

dynamic

(Optional) Displays only the dynamic (learned) IP-to-nonbroadcast multiaccess address (NBMA) cache entries. See Table 26 for types, number ranges, and descriptions.

incomplete

(Optional) Displays information about an incomplete cache. See Table 26 for types, number ranges, and descriptions.

nhs

(Optional) Displays information about the next-hop server (NHS). See Table 26 for types, number ranges, and descriptions.

static

(Optional) Displays only the static IP-to-NBMA address entries in the cache (configured using the ip nhrp map command). See Table 26 for types, number ranges, and descriptions.


Command Modes

EXEC

Command History

Release
Modification

10.3

This command was introduced.


Usage Guidelines

Table 26 lists the valid types, number ranges, and descriptions for the type and number optional arguments.


Note The valid types can vary according to the platform and interfaces on the platform.


Table 26 Valid Types, Number Ranges, and Interface Descriptions 

Valid Types
Number Ranges
Interface Descriptions

async

1

Async

atm

0 to 6

ATM

bvi

1 to 255

Bridge-Group Virtual Interface

cdma-ix

1

CDMA Ix

ctunnel

0 to 2147483647

C-Tunnel

dialer

0 to 20049

Dialer

fastethernet

0 to 6

FastEthernet IEEE 802.3

lex

0 to 2147483647

Lex

loopback

0 to 2147483647

Loopback

mfr

0 to 2147483647

Multilink Frame Relay bundle

multilink

0 to 2147483647

Multilink-group

null

0

Null

port-channel

1 to 64

Port channel

tunnel

0 to 2147483647

Tunnel

vif

1

PGM multicast host

virtual-ppp

0 to 2147483647

Virtual PPP

virtual-template

1 to 1000

Virtual template

virtual-tokenring

0 to 2147483647

Virtual Token Ring

xtagatm

0 to 2147483647

Extended tag ATM


Examples

The following is sample output from the show ip nhrp command:

Router# show ip nhrp 

10.0.0.2 255.255.255.255, ATM0/0 created 0:00:43 expire 1:59:16
 Type: dynamic Flags: authoritative 
 NBMA address: 11.1111.1111.1111.1111.1111.1111.1111.1111.1111.11 
10.0.0.1 255.255.255.255, Tunnel0 created 0:10:03 expire 1:49:56
 Type: static Flags: authoritative 
 NBMA address: 11.1.1.2 

Table 27 describes the significant fields shown in the display.

Table 27 show ip nhrp Field Descriptions 

Field
Description

10.0.0.2 255.255.255.255

IP address and its network mask in the IP-to-NBMA address cache. The mask is currently always 255.255.255.255 because we do not support aggregation of NBMA information through NHRP.

ATM0/0 created 0:00:43

Interface type and number (in this case, ATM slot and port numbers) and how long ago it was created (hours:minutes:seconds).

expire 1:59:16

Time in which the positive and negative authoritative NBMA address will expire (hours:minutes:seconds). This value is based on the ip nhrp holdtime command.

Type

dynamic—NBMA address was obtained from NHRP Request packet.

static—NBMA address was statically configured.

Flags

authoritative—Indicates that the NHRP information was obtained from the Next Hop Server or router that maintains the NBMA-to-IP address mapping for a particular destination.

implicit—Indicates that the information was learned not from an NHRP request generated from the local router, but from an NHRP packet being forwarded or from an NHRP request being received by the local router.

negative—For negative caching; indicates that the requested NBMA mapping could not be obtained.

NBMA address

Nonbroadcast multiaccess address. The address format is appropriate for the type of network being used (for example, ATM, Ethernet, Switched Multimegabit Data Service (SMDS), or multipoint tunnel).


Related Commands

Command
Description

ip nhrp map

Statically configures the IP-to-NBMA address mapping of IP destinations connected to an NBMA network.

show ip nhrp traffic

Displays NHRP traffic statistics.


show ip nhrp traffic

To display Next Hop Resolution Protocol (NHRP) traffic statistics, use the show ip nhrp traffic EXEC command.

show ip nhrp traffic

Syntax Description

This command has no arguments or keywords.

Command Modes

EXEC

Command History

Release
Modification

10.3

This command was introduced.


Examples

The following is sample output from the show ip nhrp traffic command:

Router# show ip nhrp traffic

Tunnel0
  request packets sent: 2
  request packets received: 4
  reply packets sent: 4
  reply packets received: 2
  register packets sent: 0
  register packets received: 0
  error packets sent: 0
  error packets received: 0

Table 28 describes the significant fields shown in the display.

Table 28 show ip nhrp traffic Field Descriptions 

Field
Description

Tunnel 0

Interface type and number.

request packets sent

Number of NHRP request packets originated from this station.

request packets received

Number of NHRP request packets received by this station.

reply packets sent

Number of NHRP reply packets originated from this station.

reply packets received

Number of NHRP reply packets received by this station.

register packets sent

Number of NHRP register packets originated from this station. Currently, our routers and access servers do not send register packets, so this value is 0.

register packets received

Number of NHRP register packets received by this station. Currently, our routers or access servers do not send register packets, so this value is 0.

error packets sent

Number of NHRP error packets originated by this station.

error packets received

Number of NHRP error packets received by this station.


show ip redirects

To display the address of a default gateway (router) and the address of hosts for which an Internet Control Message Protocol (ICMP) redirect message has been received, use the show ip redirects command in user EXEC or privileged EXEC mode.

show ip redirects

Syntax Description

This command has no arguments or keywords.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

10.0

This command was introduced.


Usage Guidelines

This command displays the default router (gateway) as configured by the ip default-gateway command.

The ip mtu command enables the router to send ICMP redirect messages.

Examples

The following is sample output from the show ip redirects command:

Router# show ip redirects

Default gateway is 172.89.80.29

Host               Gateway           Last Use    Total Uses  Interface
172.16.1.111      172.16.80.240         0:00             9  Ethernet0
172.16.1.4        172.16.80.240         0:00             4  Ethernet0

Related Commands

Command
Description

ip default-gateway

Defines a default gateway (router) when IP routing is disabled.

ip mtu

Enables the sending of ICMP redirect messages if the Cisco IOS software is forced to resend a packet through the same interface on which it was received.


show ip route dhcp

To display the routes added to the routing table by the Cisco IOS Dynamic Host Configuration Protocol (DHCP) server and relay agent, use the show ip route dhcp command in privileged EXEC configuration mode.

show ip route [vrf vrf-name] dhcp [ip-address]

Syntax Description

vrf

(Optional) Specifies VPN routing and forwarding instance.

vrf-name

(Optional) Name of the VRF.

ip-address

(Optional) Address about which routing information should be displayed.


Defaults

No default behavior or values

Command Modes

Privileged EXEC

Command History

Release
Modification

12.2

This command was introduced.


Usage Guidelines

To display information about global routes, use the show ip route dhcp command. To display routes in the VRF routing table, use the show ip route vrf vrf-name dhcp command.

Examples

The following is sample output from the show ip route dhcp command when entered without an address. This command lists all routes added by the Cisco IOS DHCP server and relay agent.

Router# show ip route dhcp 
  10.5.5.56/32 is directly connected, ATM0.2
  10.5.5.217/32 is directly connected, ATM0.2

The following is sample output from the show ip route dhcp command when an address is specified. The output shows the details of the address with the server address (who assigned it) and the lease expiration time.

Router# show ip route dhcp 55.5.5.217 
  10.5.5.217 is directly connected, ATM0.2
    DHCP Server: 10.9.9.10   Lease expires at Nov 08 2001 01:19 PM

The following is sample output from the show ip route vrf vrf-name dhcp command when entered without an address:

Router# show ip route vrf red dhcp
  10.5.5.218/32 is directly connected, ATM0.2

The following is sample output from the show ip route vrf vrf-name dhcp command when an address is specified. The output shows the details of the address with the server address (who assigned it) and the lease expiration time.

Router# show ip route vrf red dhcp 55.5.5.218
  10.5.5.218/32 is directly connected, ATM0.2
    DHCP Server: 10.9.9.10   Lease expires at Nov 08 2001 03:15PM

Related Commands

Command
Description

clear ip route dhcp

Removes routes from the routing table added by the DHCP server and relay agent for the DHCP clients on unnumbered interfaces.


show ip slb conns

To display the active IOS SLB connections, use the show ip slb conns privileged EXEC command.

show ip slb conns [vserver virtserver-name] [client ip-address] [detail]

Syntax Description

vserver

(Optional) Displays only those connections associated with a particular virtual server.

virtserver-name

(Optional) Name of the virtual server to be monitored.

client

(Optional) Displays only those connections associated with a particular client IP address.

ip-address

(Optional) IP address of the client to be monitored.

detail

(Optional) Displays detailed connection information.


Defaults

If no options are specified, the command displays output for all active IOS SLB connections.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows IOS SLB active connection data:

Router# show ip slb conns

vserver          prot   client                real                  state
----------------------------------------------------------------------------
TEST             TCP    10.150.72.183:328      10.80.90.25:80        INIT 
TEST             TCP    10.250.167.226:423     10.80.90.26:80        INIT 
TEST             TCP    10.234.60.239:317      10.80.90.26:80        ESTAB 
TEST             TCP    10.110.233.96:747      10.80.90.26:80        ESTAB 
TEST             TCP    10.162.0.201:770       10.80.90.30:80        CLOSING 
TEST             TCP    10.22.225.219:995      10.80.90.26:80        CLOSING 
TEST             TCP    10.2.170.148:169       10.80.90.30:80        ZOMBIE 

Table 29 describes the significant fields shown in the display.

Table 29 show ip slb conns Field Descriptions 

Field
Description

vserver

Name of the virtual server whose connections are being monitored and displayed. Information about each connection is displayed on a separate line.

prot

Protocol being used by the connection.

client

Client IP address being used by the connection.

real

Real IP address of the connection.

state

Current state of the connection:

CLOSING—IOS SLB TCP connection deactivated (awaiting a delay timeout before cleaning up the connection).

ESTAB—IOS SLB TCP connection processed a SYN-SYN/ACK exchange between the client and server.

FINCLIENT—IOS SLB TCP connection processed a FIN from the client.

FINSERVER—IOS SLB TCP connection processed a FIN from the server.

INIT—Initial state of the IOS SLB TCP connection.

SYNBOTH—IOS SLB TCP connection processed one or more TCP SYNs from both the client and the server.

SYNCLIENT—IOS SLB TCP connection processed one or more client TCP SYNs.

SYNSERVER—IOS SLB TCP connection processed one or more server 1 TCP SYNs.

ZOMBIE—Destruction of the IOS SLB TCP connection failed, possibly because of bound flows. Destruction will proceed when the flows are unbound.


show ip slb dfp

To display DFP manager and agent information such as passwords, timeouts, retry counts, and weights, use the show ip slb dfp privileged EXEC command.

show ip slb dfp [agent ip-address port-number | detail | weights]

Syntax Description

agent

(Optional) Displays information about an agent.

ip-address

(Optional) Agent IP address.

port-number

(Optional) Agent port number.

detail

(Optional) Displays all data available.

weights

(Optional) Displays information about weights assigned to real servers for load balancing.


Defaults

If no options are specified, the command displays summary information.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows IOS SLB DFP data:

router# show ip slb dfp detail

DFP Manager:
      Current passwd:NONE Pending passwd:NONE
      Passwd timeout:0 sec 
      Uned errors:0
DFP Agent 172.16.2.34:61936 Connection state:Connected
   Timeout = 0      Retry Count = 0      Interval = 180   (Default)
   Security errors = 0
   Last message received:10:20:26 UTC 11/02/99
   Last reported Real weights for Protocol TCP, Port www
      Host 10.17.17.17 1      Weight 1
      Host 10.68.68.68   Bind ID 4      Weight 4
      Host 10.85.85.85   Bind ID 5      Weight 5
   Last reported Real weights for Protocol TCP, Port 22
      Host 10.17.17.17   Bind ID 111    Weight 111
router# show ip slb dfp weights

Real IP Address 10.17.17.17 Protocol TCP Port 22 Bind_ID 111 Weight 111
      Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.17.17.17 Protocol TCP Port www Bind_ID 1 Weight 1
      Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.68.68.68 Protocol TCP Port www Bind_ID 4 Weight 4
      Set by Agent 172.44.2.3458490 at 132241 UTC 12/03/99
Real IP Address 10.85.85.85 Protocol TCP Port www Bind_ID 5 Weight 5
      Set by Agent 172.16.2.3458490 at 132241 UTC 12/03/99
router# show ip slb dfp

DFP Manager:
      Current passwd:NONE Pending passwd:NONE
      Passwd timeout:0 sec 

Agent IP          Port    Timeout   Retry Count   Interval
---------------------------------------------------------------
172.16.2.34       61936   0         0             180 (Default)

Table 30 describes the significant fields shown in the display.

Table 30 show ip slb dfp Field Descriptions

Field
Description

Agent IP

IP address of the agent about which information is being displayed.

Port

Port number of the agent.

Timeout

Time period (in seconds) during which the DFP manager must receive an update from the DFP agent. A value of 0 means there is no timeout.

Retry Count

Number of times the DFP manager attempts to establish the TCP connection to the DFP agent. A value of 0 means there are infinite retries.

Interval

Interval (in seconds) between retries.


show ip slb reals

To display information about the real servers, use the show ip slb reals command in privileged EXEC mode.

show ip slb reals [sfarm server-farm] [detail]

Syntax Description

sfarm server-farm

(Optional) Displays information about those real servers associated with the specified server farm or firewall farm.

detail

(Optional) Displays detailed information.


Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.

12.2

This command was integrated into Cisco IOS Release 12.2.

12.2(14)S

This command was integrated into Cisco IOS Release 12.2(14)S.


Usage Guidelines

If no options are specified, the command displays information about all real servers.

Examples

The following is sample output from the show ip slb reals command:

Router# show ip slb reals

real             farm name        weight   state           conns
--------------------------------------------------------------------
10.80.2.112      FRAG             8        OUTOFSERVICE    0        
10.80.5.232      FRAG             8        OPERATIONAL     0        
10.80.15.124     FRAG             8        OUTOFSERVICE    0        
10.254.2.2       FRAG             8        OUTOFSERVICE    0        
10.80.15.124     LINUX            8        OPERATIONAL     0        
10.80.15.125     LINUX            8        OPERATIONAL     0        
10.80.15.126     LINUX            8        OPERATIONAL     0        
10.80.90.25      SRE              8        OPERATIONAL     220      
10.80.90.26      SRE              8        OPERATIONAL     216      
10.80.90.27      SRE              8        OPERATIONAL     216      
10.80.90.28      SRE              8        TESTING         1        
10.80.90.29      SRE              8        OPERATIONAL     221      
10.80.90.30      SRE              8        OPERATIONAL     224      
10.80.30.3       TEST             100      READY_TO_TEST   0        
10.80.30.4       TEST             100      READY_TO_TEST   0        
10.80.30.5       TEST             100      READY_TO_TEST   0        
10.80.30.6       TEST             100      READY_TO_TEST   0        

Table 31 describes the fields shown in the display.

Table 31 show ip slb reals Field Descriptions 

Field
Description

real

IP address of the real server about which information is being displayed. Used to identify each real server. Information about each real server is displayed on a separate line.

farm name

Name of the server farm or firewall farm with which the real server is associated.

weight

Weight assigned to the real server. The weight identifies the real server's capacity, relative to other real servers in the server farm.

state

Current state of the real server.

DFP_THROTTLED—The Dynamic Feedback Protocol (DFP) agent sent a weight of 0 for this real server (send no further connections to this real server).

FAILED—The real server has failed as a result of either no response or reset (RST) responses to client traffic. (See the faildetect (real server) command for more information about controlling tolerance for no responses and RSTs.) The real server has been removed from use by the predictor algorithms. The retry timer has started.

MAXCONNS_THROTTLE—The number of connections on the real server exceeds the configured maximum number of simultaneous active connections (maxconns).

OPERATIONAL—The real server is functioning properly and is being used for load-balancing.

OPER_WAIT—The real server is waiting to become operational (waiting for a timeout or some other condition to be met).

OUTOFSERVICE—The real server was configured with no inservice and has been removed from the load-balancing predictor lists.

PROBE_FAILED—The probe has succeeded in the past but has currently failed. This failure might occur at the same time user connections fail, or it might not.

PROBE_TESTING—The probe has never succeeded, due to no response. The initial probe timed out waiting for a success.

READY_TO_TEST—The real server is queued for testing after being in FAILED state until the retry timer expired.

TESTING—The real server is queued for assignment. When a single user connection is assigned to a real server that is in READY_TO_TEST state, the real server is placed in TESTING state. If the test succeeds, the real server is placed back in OPERATIONAL state.

TEST_WAIT—The real server is waiting to begin testing (waiting for a timeout or some other condition to be met).

conns

Number of connections associated with the real server.

In general packet radio service (GPRS) load balancing, number of sessions associated with the real server.

In per-packet server load balancing, number of request packets that have been load balanced to each real server, using the connection count.


The following is sample output from the show ip slb reals detail command for a real server in a server farm:

Router# show ip slb reals detail

10.10.1.7, S, state = OPERATIONAL, type = server
  conns = 0, dummy_conns = 0, maxconns = 4294967295
  weight = 8, weight(admin) = 8, metric = 0, remainder = 0
  reassign = 3, retry = 60
  failconn threshold = 8, failconn count = 0
  failclient threshold = 2, failclient count = 0
  total conns established = 0, total conn failures = 0
  server failures = 0

The following is sample output from the show ip slb reals detail command for a real server in a firewall farm:

Router# show ip slb reals detail

10.10.3.2, F, state = OPERATIONAL, type = firewall
  conns = 0, dummy_conns = 0, maxconns = 4294967295
  weight = 8, weight(admin) = 8, metric = 0, remainder = 0
  total conns established = 8377, hash count = 0
  server failures = 0
  interface FastEthernet1/0, MAC 0000.0c41.1063

Table 32 describes the fields shown in the above detail displays.

Table 32 show ip slb reals detail Field Descriptions 

Field
Description

IP address

IP address of the real server about which information is being displayed. Used to identify each real server. Information about each real server is displayed on a separate line.

farm name

Name of the server farm or firewall farm with which the real server is associated.

state

Current state of the real server.

DFP_THROTTLED—The Dynamic Feedback Protocol (DFP) agent sent a weight of 0 for this real server (send no further connections to this real server).

FAILED—The real server has failed as a result of either no response or reset (RST) responses to client traffic. (See the faildetect (real server) command for more information about controlling tolerance for no responses and RSTs.) The real server has been removed from use by the predictor algorithms. The retry timer has started.

MAXCONNS_THROTTLE—The number of connections on the real server exceeds the configured maximum number of simultaneous active connections (maxconns).

OPERATIONAL—The real server is functioning properly and is being used for load-balancing.

OPER_WAIT—The real server is waiting to become operational (waiting for a timeout or some other condition to be met).

OUTOFSERVICE—The real server was configured with no inservice and has been removed from the load-balancing predictor lists.

PROBE_FAILED—The probe has succeeded in the past but has currently failed. This failure might occur at the same time user connections fail, or it might not.

PROBE_TESTING—The probe has never succeeded, due to no response. The initial probe timed out waiting for a success.

READY_TO_TEST—The real server is queued for testing after being in FAILED state until the retry timer expired.

TESTING—The real server is queued for assignment. When a single user connection is assigned to a real server that is in READY_TO_TEST state, the real server is placed in TESTING state. If the test succeeds, the real server is placed back in OPERATIONAL state.

TEST_WAIT—The real server is waiting to begin testing (waiting for a timeout or some other condition to be met).

type

Indicates whether the real server is associated with a server farm (server) or firewall farm (firewall).

conns

Number of connections associated with the real server.

In general packet radio service (GPRS) load balancing, number of sessions associated with the real server.

In per-packet server load balancing, number of request packets that have been load balanced to each real server, using the connection count.

dummy_conns

Internal counter used in debugging.

maxconns

Maximum number of active connections allowed on the real server at one time.

weight

Weight assigned to the real server. The weight identifies the real server's capacity, relative to other real servers in the server farm. This value could be changed by DFP.

weight(admin)

Configured (or default) weight assigned to the real server.

metric

Internal counter used in debugging.

remainder

Internal counter used in debugging.

reassign

Total number of consecutive unacknowledged SYNchronize sequence numbers (SYNs) or Create Packet Data Protocol (PDP) requests since the last time the clear ip slb counters command was issued.

retry

Interval, in seconds, to wait between the detection of a failure on the real server and the next attempt to connect to the server.

failconn threshold

Maximum number of consecutive connection failures allowed before the real server is considered to have failed.

failconn count

Total number of consecutive connection failures since the last time the clear ip slb counters command was issued.

failclient threshold

Maximum number of unique client connection failures allowed before the real server is considered to have failed.

failclient count

Total number of unique client connection failures since the last time the clear ip slb counters command was issued.

total conns established

Total number of successful connection assignments since the last time the clear ip slb counters command was issued.

total conn failures

Total number of unsuccessful connection assignments since the last time the clear ip slb counters command was issued.

server failures

Total number of times this real server has been marked failed.

hash count

Total number of times the hash algorithm has been called.

interface

Type of interface.

MAC

MAC address of the firewall.


show ip slb serverfarms

To display information about the server farms, use the show ip slb serverfarms privileged EXEC command.

show ip slb serverfarms [name serverfarm-name] [detail]

Syntax Description

name

(Optional) Displays information about only a particular server farm.

serverfarm-name

(Optional) Name of the server farm.

detail

(Optional) Displays detailed server farm information.


Defaults

No default behavior or values.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows IOS SLB server farm data:


router# show ip slb serverfarms

server farm      predictor     reals   bind id
-------------------------------------------------
FRAG             ROUNDROBIN    4       0       
LINUX            ROUNDROBIN    3       0       
SRE              ROUNDROBIN    6       0       
TEST             ROUNDROBIN    4       0       

Table 33 describes the significant fields shown in the display.

Table 33 show ip slb serverfarms Field Descriptions

Field
Description

server farm

Name of the server farm about which information is being displayed. Information about each server farm is displayed on a separate line.

predictor

Type of load-balancing algorithm (ROUNDROBIN or LEASTCONNS) used by the server farm.

reals

Number of real servers configured in the server farm.

bind id

Bind ID configured on the server farm.


show ip slb stats

To display IOS SLB statistics, use the show ip slb stats privileged EXEC command.

show ip slb stats

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows IOS SLB statistics:

router# show ip slb stats

Pkts via normal switching: 530616
Pkts via special switching:1812710
Connections Created:       783774
Connections Established:   633418
Connections Destroyed:     782752
Connections Reassigned:    0
Zombie Count:              0

Table 34 describes the significant fields shown in the display.

Table 34 show ip slb stats Field Descriptions 

Field
Description

Pkts via normal switching

Number of packets handled by the IOS SLB feature via normal switching since the last time counters were cleared.

Pkts via special switching

Number of packets handled by the IOS SLB feature via special switching since the last time counters were cleared.

Connections Created

Number of connections created since the last time counters were cleared.

Connections Established

Number of connections created that have become established since the last time counters were cleared.

Connections Destroyed

Number of connections destroyed since the last time counters were cleared.

Connections Reassigned

Number of connections reassigned to a different real server since the last time counters were cleared.

Zombie Count

Number of connections currently pending destruction, awaiting a timeout or some other condition to be met.


show ip slb sticky

To display the entries in the IOS SLB sticky database, use the show ip slb sticky privileged EXEC command.

show ip slb sticky [client ip-address]

Syntax Description

client

(Optional) Displays only those sticky database entries associated with a particular client IP address.

ip-address

(Optional) IP address of the client.


Defaults

If no options are specified, the command displays information about all virtual servers.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows the entries in the IOS SLB sticky database:

Router# show ip slb sticky

client            group   real              conns     ftp-cntrl
--------------------------------------------------------------
10.10.2.12        4097      10.10.3.2         1         0 

Table 35 describes the significant fields shown in the display.

Table 35 show ip slb sticky Field Descriptions

Field
Description

client

Client IP address that is bound to this sticky assignment.

group

Group ID for this sticky assignment.

real

Real server used by all clients connecting with the client IP address detailed on this line.

conns

Number of connections currently sharing this sticky assignment.

ftp-cntrl

Number of FTP control connections currently using this sticky assignment.


show ip slb vservers

To display information about the virtual servers, use the show ip slb vservers privileged EXEC command.

show ip slb vservers [name virtserver-name] [detail]

Syntax Description

name

(Optional) Displays information about only this virtual server.

virtserver-name

(Optional) Name of the virtual server.

detail

(Optional) Displays detailed virtual server information.


Defaults

If no options are specified, the command displays information about all virtual servers.

Command Modes

Privileged EXEC

Command History

Release
Modification

12.0(7)XE

This command was introduced.

12.1(5)T

This command was integrated into Cisco IOS Release 12.1(5)T.


Examples

The following example shows virtual server data:

router# show ip slb vservers

slb vserver      prot   virtual               state          conns   
---------------------------------------------------------------------
TEST             TCP     10.80.254.3:80        OPERATIONAL    1013    
TEST21           TCP     10.80.254.3:21        OUTOFSERVICE   0       
TEST23           TCP     10.80.254.3:23        OUTOFSERVICE   0       

Table 36 describes the significant fields shown in the display.

Table 36 show ip slb vservers Field Descriptions

Field
Description

slb vserver

Name of the virtual server about which information is being displayed. Information about each virtual server is displayed on a separate line.

prot

Protocol being used by the virtual server detailed on a given line.

virtual

Virtual IP address of the virtual server detailed on a given line.

state

Current state of the virtual server detailed on a given line.

conns

Number of connections associated with the virtual server detailed on a given line.


show ip snat

To display active Stateful Network Address Translation (SNAT) translations, use the show ip snat command in EXEC mode.

show ip snat [distributed [verbose] | peer ip-address]

Syntax Description

distributed

(Optional) Displays information about the distributed NAT, including its peers and status.

verbose

(Optional) Displays additional information for each translation table entry, including how long ago the entry was created and used.

peer ip-address

(Optional) Displays TCP connection information between peer routers.


Command Modes

EXEC

Command History

Release
Modification

12.2(13)T

This command was introduced.


Examples

The following is sample output from the show ip snat distributed command for stateful NAT connected peers:

Router# show ip snat distributed

Stateful NAT Connected Peers

SNAT: Mode PRIMARY
:State READY
:Local Address 192.168.123.2
:Local NAT id 100
:Peer Address 192.168.123.3
:Peer NAT id 200
:Mapping List 10

The following is sample output from the show ip snat distributed verbose command for stateful NAT connected peers:

Router# show ip snat distributed verbose

SNAT: Mode PRIMARY
Stateful NAT Connected Peers

:State READY
:Local Address 192.168.123.2
:Local NAT id 100
:Peer Address 192.168.123.3
:Peer NAT id 200
:Mapping List 10
:InMsgs 7, OutMsgs 7, tcb 0x63EBA408, listener 0x0

show ip sockets

To display IP socket information, use the show ip sockets command in user EXEC or privileged EXEC mode.

show ip sockets

Syntax Description

This command has no keywords or arguments.

Defaults

No default behavior or values.

Command Modes

User EXEC
Privileged EXEC

Command History

Release
Modification

10.0 T

This command was introduced.


Usage Guidelines

Use this command to verify that the socket being used is opening correctly. If there is a local and remote endpoint, a connection is established with the ports indicated.

Examples

The following is sample output from the show ip sockets command:

Router# show ip sockets

Proto    Remote         Port      Local           Port  In Out Stat TTY OutputIF
 17      10.0.0.0         0       172.16.186.193  67    0   0    1   0
 17      172.68.191.135   514     172.16.191.129  1811  0   0    0   0
 17      172.16.135.20    514     172.16.191.1    4125  0   0    0   0
 17      172.16.207.163   49      172.16.186.193  49    0   0    9   0