FXOS 故障排除命令

本节包括常见的故障排除命令。

机箱模式故障排除命令

使用以下机箱模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show environment
显示机箱的环境信息。
例如:
FPR2100 /chassis # show environment expand detail
Chassis 1:
Overall Status: Power Problem
        Operability: Operable
        Power State: Ok
        Thermal Status: Ok
PSU 1:
            Overall Status: Powered Off
            Operability: Unknown
            Power State: Off
            Voltage Status: Unknown
        PSU 2:
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Voltage Status: Ok
        Tray 1 Module 1:
            Overall Status: Operable
            Operability: Operable
            Power State: On
Fan 1:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 2:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 3:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 4:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Server 1:
            Overall Status: Ok
                Memory Array 1:
                    Current Capacity (MB): 32768
                    Populated: 2
                    DIMMs:
                    ID  Overall Status           Capacity (MB)
                    --- ------------------------ -------------
                      1 Operable                 16384
                      2 Operable                 16384
                CPU 1:
                    Presence: Equipped
                    Cores: 8
                    Product Name: Intel(R) Xeon(R) CPU D-1548 @ 2.00GHz
                    Vendor: GenuineIntel
                    Thermal Status: OK
                    Overall Status: Operable
                    Operability: Operable
scope fan
在 Firepower 2110 和 2120 设备上进入风扇模式。
scope fan-module
在 Firepower 2130 和 2140 设备上进入风扇模式。在此模式下,可以显示有关机箱风扇的详细信息。
例如:
    FPR2100 /chassis # show fan-module expand detail
    Fan Module:
        Tray: 1
        Module: 1
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Product Name: Cisco Firepower 2000 Series Fan Tray
        PID: FPR2K-FAN
        Vendor: Cisco Systems, Inc
        Fan:
            ID: 1
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Presence: Equipped
            ID: 2
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Presence: Equipped
show inventory
显示机箱编号、供应商和序列号等资产信息。
注意:此命令仅适用于 Firepower 2130 和 3140 设备。
例如:
    FPR2100 /chassis # show inventory
Chassis    PID             Vendor            Serial (SN) HW Revision
---------- --------------- ----------------- ----------- -----------
         1 FPR-2140        Cisco Systems, In JAD201005FC 0.1
show inventory expand
显示有关现场可更换组件(例如机箱、PSU 和网络模块)的详细库存信息。
例如:
    FPR2100 /chassis #   show inventory expand detail
    Chassis 1:
        Product Name: Cisco Firepower 2000 Appliance
        PID: FPR-2130
        VID: V01
        Vendor: Cisco Systems, Inc
        Model: FPR-2130
        Serial (SN): JAD2012091X
        HW Revision: 0.1
        PSU 1:
            Presence: Equipped
            Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
            PID: FPR2K-PWR-AC-400
            VID: V01
            Vendor: Cisco Systems, Inc
            Serial (SN): LIT2010CAFE
            HW Revision: 0
        PSU 2:
            Presence: Equipped
            Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
            PID: FPR2K-PWR-AC-400
            VID: V01
            Vendor: Cisco Systems, Inc
            Serial (SN): LIT2010CAFE
            HW Revision: 0
        Fan Modules:
            Tray 1 Module 1:
                Presence: Equipped
                Product Name: Cisco Firepower 2000 Series Fan Tray
                PID: FPR2K-FAN
                Vendor: Cisco Systems, Inc
        Fans:
            ID Presence
            -- --------
             1 Equipped
             2 Equipped
             3 Equipped
             4 Equipped
    Fabric Card 1:
        Description: Cisco SSP FPR 2130 Base Module
        Number of Ports: 16
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-2130
        HW Revision: 0
        Serial (SN): JAD2012091X
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
    Fabric Card 2:
        Description: 8-port 10 Gigabit Ethernet Expansion Module
        Number of Ports: 8
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-NM-8X10G
        HW Revision: 0
        Serial (SN): JAD19510AKD
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
scope psu
进入电源装置模式。在此模式下,可以查看有关电源装置的详细信息。
例如:
    FPR2100 /chassis #  show psu expand detail     
    PSU:
        PSU: 1
        Overall Status: Powered Off
        Operability: Unknown
        Power State: Off
        Presence: Equipped
        Voltage Status: Unknown
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
        PSU: 2
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Voltage Status: Ok
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
scope stats
进入统计信息模式。在此模式下,可以查看有关机箱统计信息的详细信息。
例如:
    FPR2100 /chassis # show stats
    Chassis Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/stats
        Suspect: No
        Outlet Temp1 (C): 43.000000
        Outlet Temp2 (C): 41.000000
        Inlet Temp (C): 30.000000
        Internal Temp (C): 34.000000
        Thresholded: 0
    Fan Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-1/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-2/stats
        Suspect: No
        Speed (RPM): 17340
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-3/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-4/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0     
    Psu Stats:
        Time Collected: 2016-11-14T21:19:46.318
        Monitored Object: sys/chassis-1/psu-1/stats
        Suspect: No
        Input Current (A): 0.000000
        Input Power (W): 8.000000
        Input Voltage (V): 0.000000
        Psu Temp1 (C): 32.000000
        Psu Temp2 (C): 36.000000
        Psu Temp3 (C): 32.000000
        Fan Speed (RPM): 0
        Thresholded: 0     
        Time Collected: 2016-11-14T21:19:46.318
        Monitored Object: sys/chassis-1/psu-2/stats
        Suspect: No
        Input Current (A): 0.374000
        Input Power (W): 112.000000
        Input Voltage (V): 238.503006
        Psu Temp1 (C): 36.000000
        Psu Temp2 (C): 47.000000
        Psu Temp3 (C): 47.000000
        Fan Speed (RPM): 2240
        Thresholded: 0
    CPU Env Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/blade-1/board/cpu-1/env-stats
        Suspect: No
        Temperature (C): 46.000000
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/blade-1/npu/cpu-1/env-stats
        Suspect: No
        Temperature (C): 38.000000
        Thresholded: 0
          

以太网-上行链路模式故障排除命令

使用以下以太网-上行链路模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show detail
显示有关 Firepower 设备的以太网上行链路的详细信息。
例如:

FPR2100 /eth-uplink # show detail
    Ethernet Uplink:
        Mode: Security Node
        MAC Table Aging Time (dd:hh:mm:ss): 00:04:01:40
        VLAN Port Count Optimization: Disabled
        Current Task:
scope fabric a
进入以太网-上行链路接口模式。在此模式下,可以查看端口通道、统计信息和接口信息。
例如:

FPR2100 /eth-uplink/fabric # show interface
Interface:
    Port Name      Port Type          Admin State Oper State       State Reason
    -------------- ------------------ ----------- ---------------- ------------
    Ethernet1/1    Data               Enabled     Up               Up
    Ethernet1/2    Data               Enabled     Link Down        Down
    Ethernet1/3    Data               Disabled    Link Down        Down
    Ethernet1/4    Data               Disabled    Link Down        Down
    Ethernet1/5    Data               Disabled    Link Down        Down
    Ethernet1/6    Data               Disabled    Link Down        Down
    Ethernet1/7    Data               Disabled    Link Down        Down
    Ethernet1/8    Data               Disabled    Link Down        Down
    Ethernet1/9    Data               Disabled    Link Down        Down
    Ethernet1/10   Data               Disabled    Link Down        Down
    Ethernet1/11   Data               Disabled    Link Down        Down
    Ethernet1/12   Data               Disabled    Link Down        Down
    Ethernet1/13   Data               Disabled    Link Down        Down
    Ethernet1/14   Data               Disabled    Link Down        Down
    Ethernet1/15   Data               Disabled    Link Down        Down
    Ethernet1/16   Data               Disabled    Link Down        Down
    Ethernet2/1    Data               Disabled    Link Down        Down
    Ethernet2/2    Data               Disabled    Link Down        Down
    Ethernet2/3    Data               Disabled    Link Down        Down
    Ethernet2/4    Data               Disabled    Link Down        Down
    Ethernet2/5    Data               Disabled    Link Down        Down
    Ethernet2/6    Data               Disabled    Link Down        Down
    Ethernet2/7    Data               Disabled    Link Down        Down
    Ethernet2/8    Data               Disabled    Link Down        Down

FPR2100 /eth-uplink/fabric # show port-channel
    Port Channel:
        Port Channel Id Name             Port Type          Admin State            Oper State            State Reason
        --------------- ---------------- ------------------           -----------               ----------------           ------------
        1               Port-channel1    Data               Disabled                       Link Down                      Down

FPR2100 /eth-uplink/fabric/port-channel # show stats
    Ether Error Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/err-stats
        Suspect: No
        Rcv (errors): 0
        Align (errors): 0
        Fcs (errors): 0
        Xmit (errors): 0
        Under Size (errors): 0
        Out Discard (errors): 0
        Deferred Tx (errors): 0
        Int Mac Tx (errors): 0
        Int Mac Rx (errors): 0
        Thresholded: Xmit Delta Min     
    Ether Loss Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/loss-stats
        Suspect: No
        Single Collision (errors): 0
        Multi Collision (errors): 0
        Late Collision (errors): 0
        Excess Collision (errors): 0
        Carrier Sense (errors): 0
        Giants (errors): 0
        Symbol (errors): 0
        SQE Test (errors): 0
        Thresholded: 0
    Ether Pause Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/pause-stats
        Suspect: No
        Recv Pause (pause): 0
        Xmit Pause (pause): 0
        Resets (resets): 0
        Thresholded: 0
    Ether Rx Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/rx-stats
        Suspect: No
        Total Packets (packets): 0
        Unicast Packets (packets): 0
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 0
        Total Bytes (bytes): 0
        Jumbo Packets (packets): 0
        Thresholded: 0
    Ether Tx Stats:
       Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/tx-stats
        Suspect: No
        Total Packets (packets): 0
        Unicast Packets (packets): 0
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 0
        Total Bytes (bytes): 0
        Jumbo Packets (packets): 0
    FPR2100 /eth-uplink/fabric/interface # show stats
    Ether Error Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/err-stats
        Suspect: No
        Rcv (errors): 0
        Align (errors): 0
        Fcs (errors): 0
        Xmit (errors): 0
        Under Size (errors): 0
        Out Discard (errors): 0
        Deferred Tx (errors): 0
        Int Mac Tx (errors): 0
        Int Mac Rx (errors): 0
        Thresholded: Xmit Delta Min     
    Ether Loss Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/loss-stats
        Suspect: No
        Single Collision (errors): 0
        Multi Collision (errors): 0
        Late Collision (errors): 0
        Excess Collision (errors): 0
        Carrier Sense (errors): 0
        Giants (errors): 7180
        Symbol (errors): 0
        SQE Test (errors): 0
        Thresholded: 0     
    Ether Pause Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/pause-stats
        Suspect: No
        Recv Pause (pause): 0
        Xmit Pause (pause): 0
        Resets (resets): 0
        Thresholded: 0
    Ether Rx Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/rx-stats
        Suspect: No
        Total Packets (packets): 604527
        Unicast Packets (packets): 142906
        Multicast Packets (packets): 339031
        Broadcast Packets (packets): 122590
        Total Bytes (bytes): 59805045
        Jumbo Packets (packets): 0
        Thresholded: 0
    Ether Tx Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/tx-stats
        Suspect: No
        Total Packets (packets): 145018
        Unicast Packets (packets): 145005
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 13
        Total Bytes (bytes): 13442404
        Jumbo Packets (packets): 0
        Thresholded: 0

交换矩阵互联模式故障排除命令

使用以下交换矩阵互联模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show card
显示有关交换矩阵卡的信息。
例如:
    FPR2100 /fabric-interconnect # show card detail expand
    Fabric Card:
        Id: 1
        Description: Cisco SSP FPR 2130 Base Module
        Number of Ports: 16
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-2130
        HW Revision: 0
        Serial (SN): JAD2012091X
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
show image
显示所有可用的映像。
firepower /firmware # show image
Name                                          Type                 Version
--------------------------------------------- -------------------- -------
cisco-asa-9.10.1.csp                          Firepower Cspapp     9.10.1
cisco-asa-9.9.2.csp                           Firepower Cspapp     9.9.2
fxos-k8-fp2k-firmware.0.4.04.SPA              Firepower Firmware   0.4.04
fxos-k8-fp2k-lfbff.82.1.1.303i.SSA            Firepower System     82.1(1.303i)
fxos-k8-fp2k-npu.82.1.1.303i.SSA              Firepower Npu        82.1(1.303i)
fxos-k8-fp2k-npu.82.1.1.307i.SSA              Firepower Npu        82.1(1.307i)
fxos-k9-fp2k-manager.82.1.1.303i.SSA          Firepower Manager    82.1(1.303i)
show package
显示所有可用的软件包。

firepower /firmware # show package
    Name                                          Package-Vers
    --------------------------------------------- ------------
    cisco-ftd-fp2k.9.10.1.SSA                     9.10.1
    cisco-ftd-fp2k.9.9.2.SSA                      9.9.2
    
show package package_name expand
显示软件包详细信息。
    firepower /firmware # show package cisco-ftd-fp2k.9.10.1.SSA expand
    Package cisco-ftd-fp2k.9.10.1.SSA:
        Images:
            cisco-asa.9.10.1.csp
            fxos-k8-fp2k-firmware.0.4.04.SPA
            fxos-k8-fp2k-lfbff.82.1.1.303i.SSA
            fxos-k8-fp2k-npu.82.1.1.303i.SSA
            fxos-k9-fp2k-manager.82.1.1.303i.SSA
scope auto-install
进入自动安装模式。在此模式下,可以查看当前的 FXOS 升级状态。

firepower /firmware/auto-install # show     
    Firmware Auto-Install:
        Package-Vers Oper State                   Upgrade State
        ------------ ---------------------------- -------------
        9.10.1            Scheduled                    Installing Application

scope firmware
进入固件模式。在此模式下,可以查看下载任务信息。
例如:

FPR2100 /firmware # show download-task
    Download task:
        File Name                                      Protocol Server          Port       Userid          State
        ---------                                      -------- --------------- ---------- --------------- -----
        cisco-ftd-fp2k.9.10.1.SSA                      Scp      172.29.191.78            0 danp            Downloaded
        cisco-ftd-fp2k.9.9.1.SSA                       Scp      172.29.191.78            0 danp            Downloaded
        
scope download-task
进入下载任务模式。在此模式下,可以查看有关每项下载任务的更多详细信息并重新启动下载任务。
例如:
Download task:
    File Name: test.SSA
    Protocol: Scp
    Server: 172.29.191.78
    Port: 0
    Userid: user
    Path: /tmp
    Downloaded Image Size (KB): 0
    Time stamp: 2016-11-15T19:42:29.854
    State: Failed
    Transfer Rate (KB/s): 0.000000
    Current Task: deleting downloadable test.SSA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
firepower /firmware/download-task # show fsm status 
File Name: test.SSA
    FSM 1:
        Remote Result: End Point Failed
        Remote Error Code: ERR MO Illegal Iterator State
        Remote Error Description: End point timed out. Check for IP, port, password, disk space or network access related issues.#
        Status: Download Fail
        Previous Status: Download Fail
        Timestamp: 2016-11-15T19:42:29.854
        Try: 2
        Progress (%): 0
        Current Task: deleting downloadable test.SSA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
    firepower /firmware/download-task # restart
    Password:
scope psu
进入电源装置模式。在此模式下,可以查看有关电源装置的详细信息。
例如:
    FPR2100 /chassis #  show psu expand detail     
    PSU:
        PSU: 1
        Overall Status: Powered Off
        Operability: Unknown
        Power State: Off
        Presence: Equipped
        Voltage Status: Unknown
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
        PSU: 2
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Voltage Status: Ok
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok

平台模式下 Firepower 2100 的 Connect Local-Mgmt 故障排除命令

使用以下 connect local-mgmt 模式 FXOS CLI 命令在平台模式下解决 Firepower 2100 的问题。要访问 connect local-mgmt 模式,请输入:

FPR2100# connect local-mgmt

show lacp
显示有关 EtherChannel LACP 的详细信息。
例如:

FPR2100(local-mgmt)# show lacp neighborFlags:  S - Device is requesting Slow LACPDUs
        F - Device is requesting Fast LACPDUs
        A - Device is in Active mode       P - Device is in Passive mode

Channel group: 11

Partner (internal) information:

          Partner                 Partner                       Partner
Port      System ID             Port Number     Age         Flags
Eth1/1    32768,286f.7fec.5980  0x10e           13 s        FA


          LACP Partner           Partner           Partner
          Port Priority        Oper Key        Port State
          32768                0x16            0x3f

          Port State Flags Decode:
          Activity:   Timeout:   Aggregation:   Synchronization:
          Active      Long       Yes            Yes

          Collecting:   Distributing:   Defaulted:   Expired:
          Yes           Yes             No           No

          Partner                 Partner                       Partner
Port      System ID             Port Number     Age         Flags
Eth1/2    32768,286f.7fec.5980  0x10f           5  s        FA

          LACP Partner           Partner           Partner
          Port Priority        Oper Key        Port State
          32768                0x16            0x3f

          Port State Flags Decode:
          Activity:   Timeout:   Aggregation:   Synchronization:
          Active      Long       Yes            Yes

          Collecting:   Distributing:   Defaulted:   Expired:
          Yes           Yes             No           No


FP2100(local-mgmt)# show lacp counters

             LACPDUs         Marker      Marker Response    LACPDUs
Port       Sent   Recv     Sent   Recv    Sent    Recv      Pkts Err
---------------------------------------------------------------------
Channel group: 11
Eth1/1     4435   3532     0      0        0      0         0
Eth1/2     4566   3532     0      0        0      0         0

show portchannel
显示有关 EtherChannels 的详细信息。
例如:

FPR2100(local-mgmt)# show portchannel summary
Flags:  D - Down        P - Up in port-channel (members)
I - Individual  H - Hot-standby (LACP only)
s - Suspended   r - Module-removed
S - Switched    R - Routed
U - Up (port-channel)
M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
11    Po11(U)     Eth      LACP      Eth1/1(P)    Eth1/2(P)

show portmanager
显示有关物理接口的详细信息。
例如:

FPR2100(local-mgmt)# show portmanager counters ethernet 1 1
Good Octets Received                              : 105503260
Bad Octets Received                               : 0
MAC Transmit Error                                : 0
Good Packets Received                             : 1376050
Bad Packets Received                              : 0
BRDC Packets Received                             : 210
MC Packets Received                               : 1153664
Size 64                                           : 1334830
Size 65 to 127                                    : 0
Size 128 to 255                                   : 0
Size 256 to 511                                   : 41220
Size 512 to 1023                                  : 0
Size 1024 to Max                                  : 0
Good Octets Sent                                  : 0
Good Packets Sent                                 : 0
Excessive Collision                               : 0
MC Packets Sent                                   : 0
BRDC Packets Sent                                 : 0
Unrecognized MAC Received                         : 0
FC Sent                                           : 0
Good FC Received                                  : 0
Drop Events                                       : 0
Undersize Packets                                 : 0
Fragments Packets                                 : 0
Oversize Packets                                  : 0
Jabber Packets                                    : 0
MAC RX Error Packets Received                     : 0
Bad CRC                                           : 0
Collisions                                        : 0
Late Collision                                    : 0
bad FC Received                                   : 0
Good UC Packets Received                          : 222176
Good UC Packets Sent                              : 0
Multiple Packets Sent                             : 0
Deferred Packets Sent                             : 0
Size 1024 to 15180                                : 0
Size 1519 to Max                                  : 0
txqFilterDisc                                     : 0
linkChange                                        : 1


    

FPR2100(local-mgmt)# show portmanager port-info ethernet 1 1
port_info:
        if_index:    0x1081000
        type:        PORTMGR_IPC_MSG_PORT_TYPE_PHYSICAL
        mac_address: 2c:f8:9b:1e:8f:d6
        flowctl:     PORTMGR_IPC_MSG_FLOWCTL_NONE
        role:        PORTMGR_IPC_MSG_PORT_ROLE_NPU
        admin_state: PORTMGR_IPC_MSG_PORT_STATE_ENABLED
        oper_state:  PORTMGR_IPC_MSG_PORT_STATE_UP
        admin_speed: PORTMGR_IPC_MSG_SPEED_AUTO
        oper_speed:  PORTMGR_IPC_MSG_SPEED_1GB
        admin_mtu:   9216
        admin_duplex: PORTMGR_IPC_MSG_PORT_DUPLEX_AUTO
        oper_duplex: PORTMGR_IPC_MSG_PORT_DUPLEX_FULL
        pc_if_index: 0x0
        pc_membership_status: PORTMGR_IPC_MSG_MMBR_NOT_MEMBER
        pc_protocol: PORTMGR_IPC_MSG_PORT_CHANNEL_PRTCL_NONE
        native_vlan: 101
        num_allowed_vlan: 1
                allowed_vlan[0]: 101
        PHY Data:
        PAGE IFC OFFSET VALUE  | PAGE IFC OFFSET VALUE
        ---- --- ------ -----  | ---- --- ------ -----
         0    0  0x0000 0x1140 |  0    0  0x0001 0x796d
         0    0  0x0002 0x0141 |  0    0  0x0003 0x0ee1
         0    0  0x0004 0x03e3 |  0    0  0x0005 0xc1e1
         0    0  0x0006 0x000f |  0    0  0x0007 0x2001
         0    0  0x0008 0x4f08 |  0    0  0x0009 0x0f00
         0    0  0x000a 0x3800 |  0    0  0x000f 0x3000
         0    0  0x0010 0x3070 |  0    0  0x0011 0xac08
         0    0  0x0012 0x0000 |  0    0  0x0013 0x1c40
         0    0  0x0014 0x8020 |  0    0  0x0015 0x0000
        18    0  0x001b 0x0000 | 


FPR2100(local-mgmt)# show portmanager switch mac-filters
port ix          MAC                mask        action      packets       bytes

00   0ba  2C:F8:9B:1E:8F:D7  FF:FF:FF:FF:FF:FF  FORWARD
     0c9  01:80:C2:00:00:02  FF:FF:FF:FF:FF:FF  FORWARD
     0cc  2C:F8:9B:1E:8F:F7  FF:FF:FF:FF:FF:FF  FORWARD
     0cf  FF:FF:FF:FF:FF:FF  FF:FF:FF:FF:FF:FF  FORWARD
     b70  00:00:00:00:00:00  01:00:00:00:00:00  DROP         222201    14220864
     bb8  01:00:00:00:00:00  01:00:00:00:00:00  DROP        1153821    91334968

01   0bd  2C:F8:9B:1E:8F:D6  FF:FF:FF:FF:FF:FF  FORWARD
     0c0  01:80:C2:00:00:02  FF:FF:FF:FF:FF:FF  FORWARD
     0c3  2C:F8:9B:1E:8F:F6  FF:FF:FF:FF:FF:FF  FORWARD
     0c6  FF:FF:FF:FF:FF:FF  FF:FF:FF:FF:FF:FF  FORWARD         210       13440
     b73  00:00:00:00:00:00  01:00:00:00:00:00  DROP         222201    14220864
     bbb  01:00:00:00:00:00  01:00:00:00:00:00  DROP        1153795    91281055 
<...>


FPR2100(local-mgmt)# show portmanager switch status
Dev/Port         Mode        Link   Speed  Duplex  Loopback Mode
---------  ----------------  -----  -----  ------  -------------

0/0             QSGMII        Up     1G     Full    None
0/1             QSGMII        Up     1G     Full    None
0/2             QSGMII       Down    1G     Half    None
0/3             QSGMII       Down    1G     Half    None
0/4             QSGMII       Down    1G     Half    None
0/5             QSGMII       Down    1G     Half    None
0/6             QSGMII        Up     1G     Full    None
0/7             QSGMII       Down    1G     Half    None
0/48            QSGMII       Down    1G     Half    None
0/49            QSGMII       Down    1G     Half    None
0/50            QSGMII       Down    1G     Half    None
0/51            QSGMII       Down    1G     Half    None
0/52              KR          Up     40G    Full    None
0/56            SR_LR        Down    10G    Full    None
0/57            SR_LR        Down    10G    Full    None
0/58            SR_LR        Down    10G    Full    None
0/59            SR_LR        Down    10G    Full    None
0/64            SR_LR        Down    10G    Full    None
0/65            SR_LR        Down    10G    Full    None
0/66            SR_LR        Down    10G    Full    None
0/67            SR_LR        Down    10G    Full    None
0/68            SR_LR        Down    10G    Full    None
0/69            SR_LR        Down    10G    Full    None
0/70            SR_LR        Down    10G    Full    None
0/71            SR_LR        Down    10G    Full    None
0/80              KR          Up     10G    Full    None
0/81              KR         Down    10G    Full    None
0/83              KR          Up     10G    Full    None       

安全服务模式故障排除命令

使用以下安全服务 (ssa) 模式 FXOS CLI 命令可排除 Firepower 系统的故障问题。

show app
显示有关连接到 Firpower 设备的应用的信息。
例如:

firepower /ssa # show app     
    Application:
        Name       Version    Description Author     Deploy Type CSP Type    Is Default App
        ---------- ---------- ----------- ---------- ----------- ----------- --------------
        asa        9.10.1     N/A         cisco      Native      Application Yes
        asa        9.9.2      N/A         cisco      Native      Application No