Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

Name: tfw-no-mgmt-ip-config

No management IP address configured for TFW:

    This counter is incremented when the security appliance receives an IP packet in 

transparent mode and has no management IP address defined.The packet is dropped.

Recommendation:

    Configure the device with management IP address and mask values.

Syslogs:

    322004

----------------------------------------------------------------

Name: shunned

Packet shunned:

    This counter will increment when a packet is received which has a source IP address 

that matches a host in the shun database.

Recommendation:

    No action required.

Syslogs:

    401004

----------------------------------------------------------------

Name: rm-conn-limit

RM connection limit reached:

    This counter is incremented when the maximum number of connections for a context or 

the system has been reached and a new connection is attempted.

 Recommendation:

    The device administrator can use the commands 'show resource usage' and 'show resource 

usage system' to view context and system resource limits and 'Denied' counts and adjust 

resource limits if desired.

 Syslogs:

    321001

----------------------------------------------------------------

Name: rm-conn-rate-limit

RM connection rate limit reached:

    This counter is incremented when the maximum connection rate for a context or the 

system has been reached and a new connection is attempted.

 Recommendation:

    The device administrator can use the commands 'show resource usage' and 'show resource 

usage system' to view context and system resource limits and 'Denied' counts and adjust 

resource limits if desired.

 Syslogs:

    321002

----------------------------------------------------------------

Name: np-socket-closed

Dropped pending packets in a closed socket:

    If a socket is abruptly closed, by the user or software, then any pending packets in 

the pipeline for that socket are also dropped.This counter is incremented for each packet 

in the pipeline that is dropped.