1-54
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring a Cluster of ASAs
Monitoring the ASA Cluster
access-list 101 line 8 extended permit tcp host 192.168.1.177 host 192.168.43.192
(hitcnt=3, 0, 1, 1, 1) 0xb6f59512
access-list 101 line 9 extended permit tcp host 192.168.1.177 host 192.168.43.44
(hitcnt=0, 0, 0, 0, 0) 0xdc104200
access-list 101 line 10 extended permit tcp host 192.168.1.112 host 192.168.43.44
(hitcnt=429, 109, 107, 109, 104)
0xce4f281d
access-list 101 line 11 extended permit tcp host 192.168.1.170 host 192.168.43.238
(hitcnt=3, 1, 0, 0, 2) 0x4143a818
access-list 101 line 12 extended permit tcp host 192.168.1.170 host 192.168.43.169
(hitcnt=2, 0, 1, 0, 1) 0xb18dfea4
access-list 101 line 13 extended permit tcp host 192.168.1.170 host 192.168.43.229
(hitcnt=1, 1, 0, 0, 0) 0x21557d71
access-list 101 line 14 extended permit tcp host 192.168.1.170 host 192.168.43.106
(hitcnt=0, 0, 0, 0, 0) 0x7316e016
access-list 101 line 15 extended permit tcp host 192.168.1.170 host 192.168.43.196
(hitcnt=0, 0, 0, 0, 0) 0x013fd5b8
access-list 101 line 16 extended permit tcp host 192.168.1.170 host 192.168.43.75
(hitcnt=0, 0, 0, 0, 0) 0x2c7dba0d
To display the aggregated count of in-use connections for all units, enter:
hostname# show cluster conn count
Usage Summary In Cluster:*********************************************
200 in use (cluster-wide aggregated)
cl2(LOCAL):***********************************************************
100 in use, 100 most used
cl1:******************************************************************
100 in use, 100 most used
Related Commands
Command Purpose
show conn [detail]
The show conn command shows whether a flow is a director, backup, or
forwarder flow. For details about the different roles for a connection, see
the “Connection Roles” section on page 1-15. Use the cluster exec show
conn command on any unit to view all connections. This command can
show how traffic for a single flow arrives at different ASAs in the cluster.
The throughput of the cluster is dependent on the efficiency and
configuration of load balancing. This command provides an easy way to
view how traffic for a connection is flowing through the cluster, and can
help you understand how a load balancer might affect the performance of
a flow.
show route cluster
debug route cluster
Shows cluster information for routing.
cluster exec capture
To support cluster-wide troubleshooting, you can enable capture of
cluster-specific traffic on the master unit using the cluster exec capture
command, which is then automatically enabled on all of the slave units in
the cluster.
See the “Capturing Packets” section on page 1-2.
To Next Page
Loading...
Need help?
General
