-
Cisco Security Appliance Command Reference, Version 8.0
-
About This Guide
-
Using the Command Line Interface
- A through B Commands
- C Commands
- D through F Commands
- G through I Commands
- J through L Commands
- M through O Commands
- P though R Commands
-
S Commands
-
same-security-traffic -- show asdm sessions
-
show asp drop -- show curpriv
-
show ddns -- show ipv6 traffic
-
show isakmp sa -- show route
-
show running-config -- show running-config isakmp
-
show running-config ldap -- show running-config webvpn auto-signon
-
show service-policy -- show xlate
-
shun -- sysopt radius ignore-secret
-
- T through Z Commands
-
Table Of Contents
show ddns update interface through show ipv6 traffic Commands
show ddns update interface through show ipv6 traffic Commands
show ddns update interface
To display the DDNS methods assigned to security appliance interfaces, use the show ddns update interface command in privileged EXEC mode.
show ddns update interface [interface-name]
Syntax Description
Defaults
Omitting the interface-name string displays the DDNS method assigned to each interface.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Examples
The following example displays the DDNS method assigned to the inside interface:
hostname# show ddns update interface insideDynamic DNS Update on inside:Update Method Name Update Destinationddns-2 not availablehostname#Related Commands
show ddns update method
To display the DDNS update methods in the running configuration, use the show ddns update method command in privileged EXEC mode.
show ddns update method [method-name]
Syntax Description
Defaults
Omitting the method-name string displays all configured DDNS update methods.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Examples
The following example displays the DDNS method named ddns-2:
hostname(config)# show ddns update method ddns-2Dynamic DNS Update Method: ddns-2
IETF standardized Dynamic DNS 'A' and 'PTR' records update
Maximum update interval: 0 days 0 hours 10 minutes 0 seconds
hostname(config)#
Related Commands
show debug
To show the current debugging configuration, use the show debug command.
show debug [command [keywords]]
Syntax Description
Defaults
This command has no default settings.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
•
Command History
Preexisting
This command was preexisting.
8.0(2)
The eigrp keyword was added to the list of possible command values.
Usage Guidelines
The valid command values follow. For each command, the syntax following command is identical to the syntax supported by the associated debug command. Refer to the associated debug command for information about the supported syntax.
Note
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Examples
The following commands enable debugging for authentication, accounting, and Flash memory. The show debug command is used in three ways to demonstrate how you can use it to view all debugging configuration, debugging configuration for a specific feature, and even debugging configuration for a subset of a feature.
hostname# debug aaa authenticationdebug aaa authentication enabled at level 1hostname# debug aaa accountingdebug aaa accounting enabled at level 1hostname# debug disk filesystemdebug disk filesystem enabled at level 1hostname# show debugdebug aaa authentication enabled at level 1debug aaa accounting enabled at level 1debug disk filesystem enabled at level 1hostname# show debug aaadebug aaa authentication enabled at level 1debug aaa authorization is disabled.debug aaa accounting enabled at level 1debug aaa internal is disabled.debug aaa vpn is disabled.hostname# show debug aaa accountingdebug aaa accounting enabled at level 1hostname#Related Commands
show debug mmp
To display current debug settings for the MMP inspection module, use the show debug mmp command in privileged EXEC mode.
show debug mmp
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following example shows the use of the show debug mmp command to displaythe current debug settings for the MMP inspection module:
hostname# show debug mmpdebug mmp enabled at level 1Related Commands
debug mmp
Display inspect MMP events.
inspect mmp
Configures the MMP inspection engine.
show dhcpd
To view DHCP binding, state, and statistical information, use the show dhcpd command in privileged EXEC or global configuration mode.
show dhcpd {binding [IP_address] | state | statistics}
Syntax Description
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Usage Guidelines
If you include the optional IP address in the show dhcpd binding command, only the binding for that IP address is shown.
The show dhcpd binding | state | statistics commands are also available in global configuration mode.
Examples
The following is sample output from the show dhcpd binding command:
hostname# show dhcpd bindingIP Address Hardware Address Lease Expiration Type10.0.1.100 0100.a0c9.868e.43 84985 seconds automaticThe following is sample output from the show dhcpd state command:
hostname# show dhcpd stateContext Not Configured for DHCPInterface outside, Not Configured for DHCPInterface inside, Not Configured for DHCPThe following is sample output from the show dhcpd statistics command:
hostname# show dhcpd statisticsDHCP UDP Unreachable Errors: 0DHCP Other UDP Errors: 0Address pools 1Automatic bindings 1Expired bindings 1Malformed messages 0Message ReceivedBOOTREQUEST 0DHCPDISCOVER 1DHCPREQUEST 2DHCPDECLINE 0DHCPRELEASE 0DHCPINFORM 0Message SentBOOTREPLY 0DHCPOFFER 1DHCPACK 1DHCPNAK 1Related Commands
show dhcprelay state
To view the state of the DHCP relay agent, use the show dhcprelay state command in privileged EXEC or global configuration mode.
show dhcprelay state
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
This command displays the DHCP relay agent state information for the current context and each interface.
Examples
The following is sample output from the show dhcprelay state command:
hostname# show dhcprelay stateContext Configured as DHCP RelayInterface outside, Not Configured for DHCPInterface infrastructure, Configured for DHCP RELAY SERVERInterface inside, Configured for DHCP RELAYRelated Commands
show dhcprelay statistics
To display the DHCP relay statistics, use the show dhcprelay statistics command in privileged EXEC mode.
show dhcprelay statistics
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
•
—
Command History
Usage Guidelines
The output of the show dhcprelay statistics command increments until you enter the clear dhcprelay statistics command.
Examples
The following shows sample output for the show dhcprelay statistics command:
hostname# show dhcprelay statisticsDHCP UDP Unreachable Errors: 0DHCP Other UDP Errors: 0Packets RelayedBOOTREQUEST 0DHCPDISCOVER 7DHCPREQUEST 3DHCPDECLINE 0DHCPRELEASE 0DHCPINFORM 0BOOTREPLY 0DHCPOFFER 7DHCPACK 3DHCPNAK 0hostname#Related Commands
show disk
To display the contents of the Flash memory for the adaptive security appliance only, use the show disk command in privileged EXEC mode. To display the contents of the Flash memory for a PIX security appliance only, see the show flash command.
show disk[0 | 1] [filesys | all]
Syntax Description
Defaults
Shows the internal Flash memory by default.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
—
•
Command History
Examples
The following is sample output from the show disk command:
hostname# show disk-#- --length-- -----date/time------ path11 1301 Feb 21 2005 18:01:34 test.cfg12 1949 Feb 21 2005 20:13:36 test1.cfg13 2551 Jan 06 2005 10:07:36 test2.cfg14 609223 Jan 21 2005 07:14:18 test3.cfg15 1619 Jul 16 2004 16:06:48 test4.cfg16 3184 Aug 03 2004 07:07:00 old_running.cfg17 4787 Mar 04 2005 12:32:18 test5.cfg20 1792 Jan 21 2005 07:29:24 test6.cfg21 7765184 Mar 07 2005 19:38:30 test7.cfg22 1674 Nov 11 2004 02:47:52 test8.cfg23 1863 Jan 21 2005 07:29:18 test9.cfg24 1197 Jan 19 2005 08:17:48 test10.cfg25 608554 Jan 13 2005 06:20:54 backupconfig.cfg26 5124096 Feb 20 2005 08:49:28 cdisk127 5124096 Mar 01 2005 17:59:56 cdisk228 2074 Jan 13 2005 08:13:26 test11.cfg29 5124096 Mar 07 2005 19:56:58 cdisk330 1276 Jan 28 2005 08:31:58 lead31 7756788 Feb 24 2005 12:59:46 asdmfile.dbg32 7579792 Mar 08 2005 11:06:56 asdmfile1.dbg33 7764344 Mar 04 2005 12:17:46 asdmfile2.dbg34 5124096 Feb 24 2005 11:50:50 cdisk435 15322 Mar 04 2005 12:30:24 hs_err.log10170368 bytes available (52711424 bytes used)The following is sample output from the show disk filesys command:
hostname# show disk filesys******** Flash Card Geometry/Format Info ********COMPACT FLASH CARD GEOMETRYNumber of Heads: 4Number of Cylinders 978Sectors per Cylinder 32Sector Size 512Total Sectors 125184COMPACT FLASH CARD FORMATNumber of FAT Sectors 61Sectors Per Cluster 8Number of Clusters 15352Number of Data Sectors 122976Base Root Sector 123Base FAT Sector 1Base Data Sector 155Related Commands
dir
Displays the directory contents.
show flash
Displays the contents of the internal Flash memory for the PIX security appliance only.
show dns-hosts
To show the DNS cache, use the show dns-hosts command in privileged EXEC mode.The DNS cache includes dynamically learned entries from a DNS server as well as manually entered name and IP addresses using the name command.
show dns-hosts
Syntax Description
This command has no arguments or keywords.
Defaults
No default behavior or values.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
•
•
•
—
Command History
Examples
The following is sample output from the show dns-hosts command:
hostname# show dns-hostsHost Flags Age Type Address(es)ns2.example.com (temp, OK) 0 IP 10.102.255.44ns1.example.com (temp, OK) 0 IP 192.168.241.185snowmass.example.com (temp, OK) 0 IP 10.94.146.101server.example.com (temp, OK) 0 IP 10.94.146.80Table 11 shows each field description.
Related Commands
show eigrp events
To display the EIGRP event log, use the show eigrp events command in privileged EXEC mode.
show eigrp [as-number] events [{start end} | type]
Syntax Description
Defaults
If a start and end is not specified, all log entries are shown.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
Command History
Usage Guidelines
The show eigrp events output displays up to 500 events. Once the maximum number of events has been reached, new events are added to the bottom of the output and old events are removed from the top of the output.
You can use the clear eigrp events command to clear the EIGRP event log.
The show eigrp events type command displays the logging status of EIGRP events. By default, neighbor changes, neighbor warning, and DUAL FSM messages are logged. You can disable neighbor change event logging using the no eigrp log-neighbor-changes command. You can disable neighbor warning event logging using the no eigrp log-neighbor-warnings command. You cannot disable the logging of DUAL FSM events.
Examples
The following is sample output from the show eigrp events command:
hostname# show eigrp eventsEvent information for AS 100:1 12:11:23.500 Change queue emptied, entries: 42 12:11:23.500 Metric set: 10.1.0.0/16 537603 12:11:23.500 Update reason, delay: new if 42949672954 12:11:23.500 Update sent, RD: 10.1.0.0/16 42949672955 12:11:23.500 Update reason, delay: metric chg 42949672956 12:11:23.500 Update sent, RD: 10.1.0.0/16 42949672957 12:11:23.500 Route install: 10.1.0.0/16 10.130.60.2488 12:11:23.500 Find FS: 10.1.0.0/16 42949672959 12:11:23.500 Rcv update met/succmet: 53760 2816010 12:11:23.500 Rcv update dest/nh: 10.1.0.0/16 10.130.60.24811 12:11:23.500 Metric set: 10.1.0.0/16 4294967295The following is sample output from the show eigrp events command with a start and stop number defined:
hostname# show eigrp events 3 8Event information for AS 100:3 12:11:23.500 Update reason, delay: new if 42949672954 12:11:23.500 Update sent, RD: 10.1.0.0/16 42949672955 12:11:23.500 Update reason, delay: metric chg 42949672956 12:11:23.500 Update sent, RD: 10.1.0.0/16 42949672957 12:11:23.500 Route install: 10.1.0.0/16 10.130.60.2488 12:11:23.500 Find FS: 10.1.0.0/16 4294967295The following is sample output from the show eigrp events command when there are no entries in the EIGRP event log:
hostname# show eigrp eventsEvent information for AS 100: Event log is empty.The following is sample output from the show eigrp events type command:
hostname# show eigrp events typeEIGRP-IPv4 Event Logging for AS 100:Log Size 500Neighbor Changes EnableNeighbor Warnings EnableDual FSM EnableRelated Commands
show eigrp interfaces
To display the interfaces participating in EIGRP routing, use the show eigrp interfaces command in privileged EXEC mode.
show eigrp [as-number] interfaces [if-name] [detail]
Syntax Description
Defaults
If you do not specify an interface name, information for all EIGRP interfaces is displayed.
Command Modes
The following table shows the modes in which you can enter the command:
Privileged EXEC
•
—
•
—
—
