Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet

思科 ASA 系列命令参考，S 命令

第 3 章      show as-path-access-list 至 show auto-update 命令

Recommendation:

    Only SIP traffic may be dropped.When SIP packets have the same parent lock and they 

can be queued into the same async lock queue, thus may result into blocks depletion, 

becasue only single core is handling all the media.If a SIP packet attempts to be queued 

when the size of the async lock queue exceeds the limit, the packet will be dropped.

Syslogs:

    None.

----------------------------------------------------------------

Name: loopback-lock-failed

Loopback lock failed

    This counter is incremented and the packet is dropped when packets are sent from one 

context of the appliance to another context through a shared intrface and the loopback 

queue has failed to acquire a lock.

Recommendations:

    This condition should never be encountered during normal operation and may indicate a 

software problem with the appliance.Contact the Cisco Techncial Assistance Center (TAC) if 

this error occurs.

Syslogs:

    None

----------------------------------------------------------------

Name: loopback-ifc-not-found

Loopback output interface not found

    This counter is incremented and the packet is dropped when packets are sent from one 

context of the appliance to another context through a shared interface, and the output 

interface is not found by the loopback queue.

Recommendations:

    This condition should never be encountered during normal operation and may indicate a 

software problem with the appliance.Contact the Cisco Techncial Assistance Center (TAC) if 

this error occurs.

Syslogs:

    None

----------------------------------------------------------------

Name: loopback-count-exceeded

Loopback count exceeded

    This counter is incremented and the packet is dropped when a packet is sent from one 

context of the appliance to another context through a shared interface, but this packet 

has exceeded the number of times it is allowed to queue to the loopback queue.

Recommendations:

    Check the context configuration for each context.The packet is entering a loop in the 

context configurations so that it is stuck between contexts, and is repeatedly put into 

the loopback queue.

Syslogs:

    None

----------------------------------------------------------------

Name: ips-license-disabled-fail-close

IPS module license disabled

    The IPS module license has been disabled and when the fail-close mode is configured, 

all traffic destined for the IPS module will be dropped.The status of the license can be 

checked using the “show activation-key” command.