Table Of Contents

show running-config through show running-config isakmp Commands

show running-config

show running-config aaa

show running-config aaa-server

show running-config aaa-server host

show running-config access-group

show running-config access-list

show running-config alias

show running-config arp

show running-config arp timeout

show running-config arp-inspection

show running-config asdm

show running-config auth-prompt

show running-config auto-update

show running-config banner

show running-config class

show running-config class-map

show running-config command-alias

show running-config console timeout

show running-config context

show running-config crypto

show running-config crypto isakmp

show running-config crypto ipsec

show running-config crypto map

show running-config crypto dynamic-map

show running-config dhcpd

show running-config dhcprelay

show running-config dns

show running-config domain-name

show running-config enable

show running-config established

show running-config failover

show running-config filter

show running-config fragment

show running-config ftp mode

show running-config ftp-map

show running-config global

show running-config group-delimiter

show running-config group-policy

show running-config gtp-map

show running-config http

show running-config http-map

show running-config icmp

show running-config interface

show running-config interface bvi

show running-config ip address

show running-config ip local pool

show running-config ip verify reverse-path

show running-config ipv6

show running-config isakmp

show running-config through show running-config isakmp Commands

---

show running-config

To display the configuration that is running on the FWSM, use the show running-config command in privileged EXEC mode.

show running-config [all] [command]

Syntax Description

all	Displays the entire operating configuration, including defaults.
command	Displays the configuration associated with a specific command.

Defaults

If no arguments or keywords are specified, the entire non-default FWSM configuration displays.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	•

Command History

Release	Modification
3.1(1)	Support for this command was introduced.

Usage Guidelines

The show running-config command displays the current running configuration on the FWSM.

You can use the running-config keyword only in the show running-config command. You cannot use this keyword with no or clear, or as a standalone command, because the CLI treats it as a nonsupported command. When you enter the ?, no ?, or clear ? keywords, a running-config keyword is not listed in the command list.

---

Note The device manager commands appear in the configuration after you use it to connect to or configure the FWSM.

---

Examples

This example show how to display the configuration that is running on the FWSM:

hostname# show running-config

: Saved

:

FWSM Version 3.1(0)

names

!

interface Ethernet0

 nameif test

 security-level 10

 ip address 10.10.88.50 255.255.255.254

!

interface Ethernet1

 nameif inside

 security-level 100

 ip address 10.86.194.176 255.255.254.0

!

interface Ethernet2

 shutdown

 no nameif

 security-level 0

 no ip address

!

interface Ethernet3

 shutdown

 no nameif

 security-level 0

 no ip address

!

interface Ethernet4

 shutdown

 no nameif

 security-level 0

 no ip address

!

interface Ethernet5

 shutdown

 no nameif

 security-level 0

 no ip address

!

enable password 8Ry2YjIyt7RRXU24 encrypted

passwd 2KFQnbNIdI.2KYOU encrypted

hostname FWSM

domain-name example.com

boot system flash:/cdisk.bin

ftp mode passive

pager lines 24

mtu test 1500

mtu inside 1500

monitor-interface test

monitor-interface inside

ASDM image flash:ASDM

no ASDM history enable

arp timeout 14400

route inside 0.0.0.0 0.0.0.0 10.86.194.1 1

timeout xlate 3:00:00

timeout conn 2:00:00 half-closed 1:00:00 udp 0:02:00 icmp 1:00:00 rpc 1:00:00 h3

23 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02

:00

timeout uauth 0:00:00 absolute

http server enable

http 0.0.0.0 0.0.0.0 inside

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp

fragment size 200 test

fragment chain 24 test

fragment timeout 5 test

fragment size 200 inside

fragment chain 24 inside

fragment timeout 5 inside

telnet 0.0.0.0 0.0.0.0 inside

telnet timeout 1440

ssh timeout 5

console timeout 0

group-policy todd internal

!

class-map inspection_default

 match default-inspection-traffic

!

!

policy-map fwsm_global_fw_policy

 class inspection_default

  inspect dns

  inspect ftp

  inspect h323 h225

  inspect h323 ras

  inspect http

  inspect ils

  inspect mgcp

  inspect netbios

  inspect rpc

  inspect rsh

  inspect rtsp

  inspect sip

  inspect skinny

  inspect sqlnet

  inspect tftp

  inspect xdmcp

  inspect ctiqbe

  inspect cuseeme

  inspect icmp

!

terminal width 80

service-policy fwsm_global_fw_policy global

Cryptochecksum:bfecf4b9d1b98b7e8d97434851f57e14

: end

Related Commands

Command	Description
configure	Configures the FWSM from the terminal.

show running-config aaa

To show the AAA configuration in the running configuration, use the show running-config aaa command in privileged EXEC mode.

show running-config aaa [accounting | authentication | authorization | mac-exempt | proxy-limit]

Syntax Description

accounting	(Optional) Show accounting-related AAA configuration.
authentication	(Optional) Show authentication-related AAA configuration.
authorization	(Optional) Show authorization-related AAA configuration.
mac-exempt	(Optional) Show MAC address exemption AAA configuration.
proxy-limit	(Optional) Show the number of concurrent proxy connections allowed per user.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	—

Command History

Release	Modification
1.1(1)	The show aaa command was introduced.
2.2(1)	The show aaa command was modified to support a LOCAL method.
3.1(1)	This command was changed from show aaa.

Examples

The following is sample output from the show running-config aaa command:

hostname# show running-config aaa

aaa authentication match infrastructure_authentication_radiusvrs infrastructure radiusvrs

aaa accounting match infrastructure_authentication_radiusvrs infrastructure radiusvrs

aaa authentication secure-http-client

aaa local authentication attempts max-fail 16

Related Commands

Command	Description
aaa authentication match	Enables authentication for traffic that is identified by an access list.
aaa authorization match	Enables authorization for traffic that is identified by an access list.
aaa accounting match	Enables accounting for traffic that is identified by an access list.
aaa max-exempt	Specifies the use of a predefined list of MAC addresses to exempt from authentication and authorization.
aaa proxy-limit	Configure the uauth session limit by setting the maximum number of concurrent proxy connections allowed per user.

show running-config aaa-server

To display AAA server configuration, use the show running-config aaa-server command in privileged EXEC mode.

show running-config [all] aaa-server [server-tag] [(interface-name)]

Syntax Description

all	(Optional) Shows defaults values, which are otherwise omitted from command output.
(interface-name)	(Optional) The network interface where the AAA server resides.
server-tag	(Optional) The symbolic name of the server group.

Defaults

Omitting the all keyword displays only the explicitly configured configuration values, not the default values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	—	—	•

Command History

Release	Modification
1.1(1)	The show aaa-server command was introduced.
3.1(1)	This command was changed from show aaa-server.

Usage Guidelines

Use this command to display the settings for a particular server group. Use the all keyword to display default values as well as the explicitly configured values.

Examples

To display the running configuration for the default AAA server group, use the following command:

hostname(config)# show running-config default aaa-server

aaa-server group1 protocol tacacs+ accounting-mode simultaneous 

reactivation-mode depletion deadtime 10

max-failed-attempts 4

Related Commands

Command	Description
show aaa-server	Displays AAA server statistics.
show running-config aaa-server host	Displays AAA server settings for a specific AAA server.
clear configure aaa-server	Clears the AAA server configuration.

show running-config aaa-server host

To display AAA server statistics for a particular AAA server, use the show running-config aaa-server host command in global configuration or privileged EXEC mode.

show running-config [all] aaa-server server-tag [(interface-name)] host aaa-server-name

Syntax Description

all	(Optional) Shows the running configuration, including default configuration values.
host aaa-server-name	Specifies the AAA server by hostname or IP address.
(interface-name)	(Optional) The network interface where the AAA server resides.
server-tag	The symbolic name of the server group.

Defaults

Omitting the all keyword displays only the explicitly configured configuration values, not the default values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	—	—	•
Global configuration	•	•	—	—	•

Command History

Release	Modification
3.1(1)	This command was introduced.

Usage Guidelines

Use this command to display the statistics for a particular server group. Use the all keyword to display default values as well as the explicitly configured values.

Examples

To display the running configuration for the server group svrgrp1, use the following command:

hostname(config)# show running-config all aaa-server svrgrp1

Related Commands

Command	Description
show running-config aaa-server	Displays AAA server settings.
clear configure aaa	Removes the settings for all AAA servers across all groups.

show running-config access-group

To display the access group information, use the show running-config access-group command in privileged EXEC mode.

show running-config access-group

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	—

Command History

Release	Modification
1.1(1)	This command was introduced.
3.1(1)	This command was changed from show access-group.

Examples

The following is sample output from the show running-config access-group command:

hostname# show running-config access-group

access-group 100 in interface outside

Related Commands

Command	Description
access-group	Binds an access list to an interface.
clear configure access-group	Removes access groups from all the interfaces.

show running-config access-list

To display the access-list configuration that is running on the FWSM, use the show running-config access-list command in privileged EXEC mode.

show running-config [all] access-list [alert-interval | deny-flow-max]

show running-config [all] access-list id [saddr_ip]

Syntax Description

alert-interval	Shows the alert interval for generating syslog message 106001, which alerts that the system has reached a deny flow maximum.
all	Shows all commands, including those not changed from the default.
deny-flow-max	Shows the maximum number of concurrent deny flows that can be created.
id	Identifies the access list that is displayed.
saddr_ip	Shows the access list elements that contain the specified source IP address.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	—

Command History

Release	Modification
3.1(1)	This command was introduced.

Usage Guidelines

The show running-config access-list command lets you display the current running access list configuration on the FWSM.

Examples

The following is sample output from the show running-config access-list command:

hostname# show running-config access-list

access-list allow-all extended permit ip any any

Related Commands

Command	Description
access-list ethertype	Configures an access list that controls traffic based on its EtherType.
access-list extended	Adds an access list to the configuration and configures policy for IP traffic through the firewall.
access-list ethertype	Configures an access list that controls traffic based on its EtherType.
clear access-list	Clears an access list counter.
clear configure access-list	Clears an access list from the running configuration.

show running-config alias

To display the alias configuration, use the show running-config alias command in privileged EXEC mode.

show running-config [all] alias [interface_name]

Syntax Description

all	(Optional) Shows all commands, including the commands you have not changed from the default.
interface_name	(Optional) Shows the alias commands for the specified interface.

Defaults

This command has no default settings.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Global configuration	•	—	—	•	•

Command History

Release	Modification
1.1(1)	This command was introduced.
3.1(1)	This command was changed from show alias.

Examples

This example shows how to display alias information:

hostname# show running-config alias

Related Commands

Command	Description
alias	Creates an alias.
clear configure alias	Deletes an alias.

show running-config arp

To show static ARP entries created by the arp command in the running configuration, use the show running-config arp command in privileged EXEC mode.

show running-config [all] arp

Syntax Description

all	(Optional) Shows all commands, including the commands you have not changed from the default.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	—

Command History

Release	Modification
3.1(1)	This command was introduced.

Examples

The following is sample output from the show running-config arp command:

hostname# show running-config arp

arp inside 10.86.195.11 0008.023b.9893

Related Commands

Command	Description
arp	Adds a static ARP entry.
arp-inspection	For transparent firewall mode, inspects ARP packets to prevent ARP spoofing.
show arp	Shows the ARP table.
show arp statistics	Shows ARP statistics.

show running-config arp timeout

To view the ARP timeout configuration in the running configuration, use the show running-config arp timeout command in privileged EXEC mode.

show running-config [all] arp timeout

Syntax Description

all	(Optional) Shows all commands, including the commands you have not changed from the default.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	—

Command History

Release	Modification
1.1(1)	This command was introduced.
3.1(1)	This command was changed from show arp timeout.

Examples

The following is sample output from the show running-config arp timeout command:

hostname# show running-config arp timeout

arp timeout 20000 seconds

Related Commands

Command	Description
arp	Adds a static ARP entry.
arp timeout	Sets the time before the FWSM rebuilds the ARP table.
arp-inspection	For transparent firewall mode, inspects ARP packets to prevent ARP spoofing.
show arp statistics	Shows ARP statistics.

show running-config arp-inspection

To view the ARP inspection configuration in the running configuration, use the show running-config arp-inspection command in privileged EXEC mode.

show running-config [all] arp-inspection

Syntax Description

all	(Optional) Shows all commands, including the commands you have not changed from the default.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	—	•	•	•	—

Command History

Release	Modification
3.1(1)	This command was introduced.

Examples

The following is sample output from the show running-config arp-inspection command:

hostname# show running-config arp-inspection

arp-inspection inside1 enable no-flood

Related Commands

Command	Description
arp	Adds a static ARP entry.
arp-inspection	For transparent firewall mode, inspects ARP packets to prevent ARP spoofing.
clear configure arp-inspection	Clears the ARP inspection configuration.
firewall transparent	Sets the firewall mode to transparent.
show arp statistics	Shows ARP statistics.

show running-config asdm

To display the asdm commands in the running configuration, use the show running-config asdm command in privileged EXEC mode.

show running-config asdm [group | location]

Syntax Description

group	(Optional) Limits the display to the asdm group commands in the running configuration.
location	(Optional) Limits the display to the asdm location commands in the running configuration.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	•

Command History

Release	Modification
1.1(1)	This command was introduced (as show running-config pdm).
3.1(1)	This command was changed from the show running-config pdm command to the show running-config asdm command.

Usage Guidelines

To remove the asdm commands from the configuration, use the clear configure asdm command.

---

Note On FWSMs running in multiple context mode, the show running-config asdm group and show running-config asdm location commands are only available in the system execution space.

---

Examples

The following is sample output from the show running-configuration asdm command:

hostname# show running-config asdm

asdm history enable

hostname#

Related Commands

Command	Description
clear configure asdm	Removes all asdm commands from the running configuration.

show running-config auth-prompt

To displays the current authentication prompt challenge text, use the show running-config auth-prompt command in global configuration mode.

show running-config [default] auth-prompt

Syntax Description

default

(Optional) Display the default authentication prompt challenge text.

Defaults

Display the configured authentication prompt challenge text.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Global configuration	•	•	—	—	•

Command History

Release	Modification
1.1(1)	The show auth-prompt command was introduced.
3.1(1)	This command was changed from show auth-prompt.

Usage Guidelines

After you set the authentication prompt, use the show running-config auth-prompt command to view the current prompt text.

Examples

This example shows the use of the show running-config auth-prompt command to show the authentication prompt configuration:

hostname(config)# show running-config auth-prompt

auth-prompt prompt Please sign in.

auth-prompt accept Welcome. Unauthorized access strictly prohibited.

auth-prompt reject Credentials invalid.

hostname(config)#

Related Commands

auth-prompt	Set the user authentication prompts.
clear configure auth-prompt	Reset the user authentication prompts to the default value.

show running-config auto-update

To display the auto-update commands in the running configuration, use the show running-config auto-update command in privileged EXEC mode.

show running-config [all] auto-update

Syntax Description

all	(Optional) Shows all commands, including the commands you have not changed from the default.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	—	—

Command History

Release	Modification
3.1(1)	This command was introduced.

Examples

The following is sample output from the show running-configuration auto-update command:

hostname# show running-config auto-update

auto-update poll-period 1 1

auto-update server http://10.1.1.1:1741/

Related Commands

Command	Description
auto-update device-id	Sets the FWSM device ID for use with an Auto Update Server.
auto-update poll-period	Sets how often the FWSM checks for updates from an Auto Update Server.
auto-update server	Identifies the Auto Update Server.
auto-update timeout	Stops traffic from passing through the FWSM if the Auto Update Server is not contacted within the timeout period.
clear configure auto-update	Clears the Auto Update Server configuration

show running-config banner

To display the specified banner and all the lines that are configured for it, use the show running-config banner command in privileged EXEC mode.

show running-config banner [exec | login | motd]

Syntax Description

exec	(Optional) Displays the banner before the enable prompt.
login	(Optional) Displays the banner before the password login prompt when accessing the FWSM using Telnet.
motd	(Optional) Displays the message-of-the-day banner.

Defaults

No default behavior or values.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode	Firewall Mode		Security Context
	Routed	Transparent	Single	Multiple
				Context	System
Privileged EXEC	•	•	•	•	•

Command History

<