Cisco Cisco IOS Software Release 12.3(4)T

To monitor and maintain SSG Prepaid Idle Timeout functionality, use the following commands in 
privileged EXEC mode:

This section provides the following configuration examples:

Router# debug radius

Displays information associated with RADIUS.

Router# debug ssg ctrl-error

Displays all error messages for control modules.

Router# debug ssg ctrl-events

Displays all event messages for control modules.

Router# debug ssg ctrl-packets

Displays packet contents handled by control modules.

Router# debug ssg data

Displays all data path packets.

Router# debug ssg errors

Displays all error messages for the system modules.

Router# debug ssg tcp-redirect {error | event | 

}

Turns on debugging information for the SSG TCP Redirect for 
Services feature. 

error—Displays any SSG TCP redirect errors. 

event—Displays any major SSG TCP redirect events or state 
changes.

packet—Displays redirection information and any changes 
made to a packet when it is due for redirection. 

Router# show ssg tcp-redirect group [group-name]

Lists all configured captive portal groups and indicates which 
group receives redirected packets from unauthorized users. If the 
group-name is specified, this command displays detailed 
information about that captive portal group.

Router# show tcp-redirect mappings [ip-address] 

[interface]

Displays the redirect mappings currently stored in SSG. If the 
host ip-address is provided, this command displays detailed 
redirect mapping information for the specified host. The TCP 
redirect mappings are removed automatically after the TCP 
session terminates or is idle for more than 60 seconds.