Cisco Cisco ASA 5510 Adaptive Security Appliance Leaflet

Cisco ASA Series 명령 참조, S 명령      

4장      show bgp through show cpu 명령

  Unit "B" in state SLAVE

      ID        : 3

      Version   : 100.8(0.52)

      Serial No.: P3000000191

      CCL IP    : 10.0.0.2

      CCL MAC   : 000b.fcf8.c61e

      Last join : 19:13:50 UTC Sep 23 2011

      Last leave: 19:13:36 UTC Sep 23 2011

다음은 show cluster info incompatible-config 명령의 샘플 출력입니다.

ciscoasa(cfg-cluster)# show cluster info incompatible-config

INFO: Clustering is not compatible with following commands which given a user's 

confirmation upon enabling clustering, can be removed automatically from running-config.

policy-map global_policy

 class scansafe-http

  inspect scansafe http-map fail-close

policy-map global_policy

 class scansafe-https

  inspect scansafe https-map fail-close

INFO: No manually-correctable incompatible configuration is found.

다음은 show cluster info trace 명령의 샘플 출력입니다.

ciscoasa# show cluster info trace

 Feb 02 14:19:47.456 [DBUG]Receive CCP message: CCP_MSG_LOAD_BALANCE

 Feb 02 14:19:47.456 [DBUG]Receive CCP message: CCP_MSG_LOAD_BALANCE

 Feb 02 14:19:47.456 [DBUG]Send CCP message to all: CCP_MSG_KEEPALIVE from 80-1 at MASTER

다음은 ASA 5500-X에서 실행된 show cluster info health 명령의 샘플 출력입니다.

ciscoasa# show cluster info health

Member ID to name mapping:

  0 - A   1 - B(myself)

                         0        1

GigabitEthernet0/0       up       up

Management0/0            up       up

ips (policy off)         up       None

sfr (policy off)         None     up

Unit overall             healthy   healthy

Cluster overall          healthy

위 출력은 ASA IPS(ips) 및 ASA FirePOWER(sfr) 모듈을 모두 나열하며, 각 모듈에 대해 ASA는 
“policy on” 또는 “policy off”를 표시하여 서비스 정책에서 모듈을 구성했는지 나타냅니다. 예를 들
면 다음과 같습니다.

class-map sfr-class

match sfr-traffic

policy-map sfr-policy

class sfr-class

sfr inline fail-close

service-policy sfr interface inside

위 컨피그레이션에서 ASA FirePOWER 모듈("sfr")은 "policy on"으로 표시됩니다. 하나의 클러스터 
멤버에는 “up”인 모듈이 있고, 다른 멤버에는 “down” 또는 “None”인 모듈이 있는 경우 down 모듈
이 있는 멤버는 클러스터에서 추방됩니다. 그러나 서비스 정책이 구성되지 않은 경우에는 클러스
터 멤버가 클러스터에서 추방되지 않습니다. 모듈 상태는 모듈이 실행 중인 경우에만 관련이 있습
니다.