Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet
3-90
思科 ASA 系列命令参考,S 命令
第 3 章 show as-path-access-list 至 show auto-update 命令
show asp drop
Syslogs:
None.
----------------------------------------------------------------
Name: reset-by-sfr
SFR requested to terminate and reset the flow:
The SFR requested to terminate and reset the flow.The actions bit 1 is set.
Recommendation:
Review SFR policies for any such rule denying the flow.
Syslogs:
None.
----------------------------------------------------------------
Name: sfr-fail-close
Flow was terminated:
The flow was terminated because the card is down and the configured policy was
'fail-close'.
Recommendation:
Check card status and attempt to restart services or reboot it.
Syslogs:
None.
----------------------------------------------------------------
Name: cmd-invalid-encap
The security appliance received an invalid CMD packet.
An invalid CMD packet is one which does not conform to the standard CMD header
values.This counter checks if the packet conforms to the correct metadata, version,
length, option and sgt range.
Recommendation:
None.
Syslogs:
None.
----------------------------------------------------------------
Name: ifc-not-cmd-enabled
The security appliance receives a CMD packet on an interface not configured to receive
one.
The packet is dropped.
Recommendation:
None.
Syslogs:
None.
----------------------------------------------------------------
Name: ifc-zn-chg
Interface experienced a zone change
The parent interface has been joined or left a zone.
Recommendation:
None.
Syslogs:
302014, 302016, 302018, 302021, 302304
----------------------------------------------------------------