Cisco ASA 5540 User Manual

1-25
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
Monitoring the ASA Integrated with Cisco TrustSec
Monitoring Environment Data
Syntax:
show cts sxp connections security-group-table [sgt value | name name-value]
Description:
This command displays the Cisco TrustSec environment information contained in security group table
on the ASA. This information includes the expiry timeout and security group name table. The security
group table is populated with data from the ISE when you import the PAC file.
You can select a specific table entry to display by specifying either a SGT or security group name. A
security group has a single name assigned to it. The same name can only be associated with a single SGT.
If you do not specify either an SGT or a name, the ASA displays all the environment data contained in
the security group table.
When an entry includes “reserved,” the SGT was assigned from a reserved range.
Output:
This example displays the environment data that appears when the ASA is unable to import the PAC file:
hostname# show cts environment-data
CTS Environment Data
====================
Status: Expired
Last download attempt: Failed
Retry_timer (60 secs) is running
This example displays the environment data that appears when the ASA has successfully imported the
PAC file:
hostname# show cts environment-data
CTS Environment Data
====================
Status: Active
Last download attempt: Successful
Environment Data Lifetime: 1036800 secs
Last update time: 16:43:39 EDT May 5 2011
Env-data expires in 11:01:18:27 (dd:hr:mm:sec)
Env-data refreshes in 11:01:08:27 (dd:hr:mm:sec)
This example displays the environment data that is contained in the security group table:
hostname# show cts environment-data sg-table
Valid until: 04:16:29 EST Feb 16 2012
Total number of entries: 4
Number of entries shown: 4
SG Name SG Tag Type
------- ------- ------------
sgt value Displays environment data for the security group name that matches
the specified SGT value; where value is a number from 1 to 65533.
name name-value Display environment data for the security group name that you
specify; where name-value is a 32-byte case-sensitive string.

Cisco ASA 5540 Specifications

General

Firewall Throughput	650 Mbps
Maximum Firewall Connections	400, 000
VPN Throughput	225 Mbps
Maximum VPN Peers	5, 000
High Availability	Active/Active, Active/Standby
IPSec VPN Throughput	225 Mbps
Memory	1 GB
IPS Throughput	225 Mbps
Security Contexts	50
Flash Memory	64 MB
Form Factor	1U
Power Supply	Dual
Interfaces	4 x 10/100/1000 Ethernet