Cisco ASA Series Cli Configuration Manual page 930

Monitoring the ASA Integrated with Cisco TrustSec
Marketing
Engineering 123
Finance
Payroll
Monitoring Cisco TrustSec IP-SGT Mappings
This section contains the following topics about monitoring Cisco TrustSec IP-SGT mappings:
•
•
•
To display IP-SGT Manager entries in the control plane
Syntax:
show cts sgt-map [address ip_address|[ipv4|ipv6]] [sgt value] [name sg_name]
[brief|detail]
Description:
This command displays the active IP-SGT mappings consolidated from SXP. Include the detail keyword
to display more information, such as the security group names with the SGT values (included brackets).
If a security group name is not available, only the SGT value is displayed without the bracket.
address ip_address
ipv4 | ipv6
sgt value
name sg_name
brief
detail
Output:
This example shows IP-SGT mappings that have IPv6 addresses:
hostname# show cts sgt-map ipv6
Active IP-SGT Bindings Information
IP Address
============================================================
3330::1
FE80::A8BB:CCFF:FE00:110
IP-SGT Active Bindings Summary
============================================
Cisco ASA Series CLI Configuration Guide
1-26
1 unicast
unicast (reserved)
44 multicast
54321 multicast (reserved)
To display IP-SGT Manager entries in the control plane, page 1-26
To display IP-SGT mappings learned via SXP, page 1-27
To display the IP-SGT mappings database in the datapath, page 1-29
Displays IP-SGT mappings that match the specified IPv4 or IPv6
address.
Displays IPv4 or IPv6 mappings. By default, only IPv4 mappings
are displayed.
Displays IP-SGT mappings that match the specified SGT.
Displays IP-SGT mappings that match the specified security group
name.
Displays the summary.
Displays details, such as the security group name.
Chapter 1 Configuring the ASA to Integrate with Cisco TrustSec
SGT Source
17 SXP
17 SXP