适用于含 ASA 的 Firepower 1000/2100 的思科 FXOS 故障排除指南

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages

Results

Updated:
April 16, 2021

Chapter: FXOS 故障排除命令

FXOS 故障排除命令

本节包括常见的故障排除命令。

机箱模式故障排除命令

使用以下机箱模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show environment
显示机箱的环境信息。
例如：
FPR2100 /chassis # show environment expand detail
Chassis 1:
Overall Status: Power Problem
        Operability: Operable
        Power State: Ok
        Thermal Status: Ok
PSU 1:
            Overall Status: Powered Off
            Operability: Unknown
            Power State: Off
            Voltage Status: Unknown
        PSU 2:
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Voltage Status: Ok
        Tray 1 Module 1:
            Overall Status: Operable
            Operability: Operable
            Power State: On
Fan 1:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 2:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 3:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Fan 4:
            Overall Status: Operable
            Operability: Operable
            Power State: On
        Server 1:
            Overall Status: Ok
                Memory Array 1:
                    Current Capacity (MB): 32768
                    Populated: 2
                    DIMMs:
                    ID  Overall Status           Capacity (MB)
                    --- ------------------------ -------------
                      1 Operable                 16384
                      2 Operable                 16384
                CPU 1:
                    Presence: Equipped
                    Cores: 8
                    Product Name: Intel(R) Xeon(R) CPU D-1548 @ 2.00GHz
                    Vendor: GenuineIntel
                    Thermal Status: OK
                    Overall Status: Operable
                    Operability: Operable
scope fan
在 Firepower 2110 和 2120 设备上进入风扇模式。
scope fan-module
在 Firepower 2130 和 2140 设备上进入风扇模式。在此模式下，可以显示有关机箱风扇的详细信息。
例如：
    FPR2100 /chassis # show fan-module expand detail
    Fan Module:
        Tray: 1
        Module: 1
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Product Name: Cisco Firepower 2000 Series Fan Tray
        PID: FPR2K-FAN
        Vendor: Cisco Systems, Inc
        Fan:
            ID: 1
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Presence: Equipped
            ID: 2
            Overall Status: Operable
            Operability: Operable
            Power State: On
            Presence: Equipped
show inventory
显示机箱编号、供应商和序列号等资产信息。
注意：此命令仅适用于 Firepower 2130 和 3140 设备。
例如：
    FPR2100 /chassis # show inventory
Chassis    PID             Vendor            Serial (SN) HW Revision
---------- --------------- ----------------- ----------- -----------
         1 FPR-2140        Cisco Systems, In JAD201005FC 0.1
show inventory expand
显示有关现场可更换组件（例如机箱、PSU 和网络模块）的详细库存信息。
例如：
    FPR2100 /chassis #   show inventory expand detail
    Chassis 1:
        Product Name: Cisco Firepower 2000 Appliance
        PID: FPR-2130
        VID: V01
        Vendor: Cisco Systems, Inc
        Model: FPR-2130
        Serial (SN): JAD2012091X
        HW Revision: 0.1
        PSU 1:
            Presence: Equipped
            Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
            PID: FPR2K-PWR-AC-400
            VID: V01
            Vendor: Cisco Systems, Inc
            Serial (SN): LIT2010CAFE
            HW Revision: 0
        PSU 2:
            Presence: Equipped
            Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
            PID: FPR2K-PWR-AC-400
            VID: V01
            Vendor: Cisco Systems, Inc
            Serial (SN): LIT2010CAFE
            HW Revision: 0
        Fan Modules:
            Tray 1 Module 1:
                Presence: Equipped
                Product Name: Cisco Firepower 2000 Series Fan Tray
                PID: FPR2K-FAN
                Vendor: Cisco Systems, Inc
        Fans:
            ID Presence
            -- --------
             1 Equipped
             2 Equipped
             3 Equipped
             4 Equipped
    Fabric Card 1:
        Description: Cisco SSP FPR 2130 Base Module
        Number of Ports: 16
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-2130
        HW Revision: 0
        Serial (SN): JAD2012091X
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
    Fabric Card 2:
        Description: 8-port 10 Gigabit Ethernet Expansion Module
        Number of Ports: 8
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-NM-8X10G
        HW Revision: 0
        Serial (SN): JAD19510AKD
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
scope psu
进入电源装置模式。在此模式下，可以查看有关电源装置的详细信息。
例如：
    FPR2100 /chassis #  show psu expand detail     
    PSU:
        PSU: 1
        Overall Status: Powered Off
        Operability: Unknown
        Power State: Off
        Presence: Equipped
        Voltage Status: Unknown
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
        PSU: 2
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Voltage Status: Ok
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
scope stats
进入统计信息模式。在此模式下，可以查看有关机箱统计信息的详细信息。
例如：
    FPR2100 /chassis # show stats
    Chassis Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/stats
        Suspect: No
        Outlet Temp1 (C): 43.000000
        Outlet Temp2 (C): 41.000000
        Inlet Temp (C): 30.000000
        Internal Temp (C): 34.000000
        Thresholded: 0
    Fan Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-1/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-2/stats
        Suspect: No
        Speed (RPM): 17340
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-3/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/fan-module-1-1/fan-4/stats
        Suspect: No
        Speed (RPM): 17280
        Thresholded: 0     
    Psu Stats:
        Time Collected: 2016-11-14T21:19:46.318
        Monitored Object: sys/chassis-1/psu-1/stats
        Suspect: No
        Input Current (A): 0.000000
        Input Power (W): 8.000000
        Input Voltage (V): 0.000000
        Psu Temp1 (C): 32.000000
        Psu Temp2 (C): 36.000000
        Psu Temp3 (C): 32.000000
        Fan Speed (RPM): 0
        Thresholded: 0     
        Time Collected: 2016-11-14T21:19:46.318
        Monitored Object: sys/chassis-1/psu-2/stats
        Suspect: No
        Input Current (A): 0.374000
        Input Power (W): 112.000000
        Input Voltage (V): 238.503006
        Psu Temp1 (C): 36.000000
        Psu Temp2 (C): 47.000000
        Psu Temp3 (C): 47.000000
        Fan Speed (RPM): 2240
        Thresholded: 0
    CPU Env Stats:
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/blade-1/board/cpu-1/env-stats
        Suspect: No
        Temperature (C): 46.000000
        Thresholded: 0
        Time Collected: 2016-11-14T21:19:46.317
        Monitored Object: sys/chassis-1/blade-1/npu/cpu-1/env-stats
        Suspect: No
        Temperature (C): 38.000000
        Thresholded: 0

以太网-上行链路模式故障排除命令

使用以下以太网-上行链路模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show detail
显示有关 Firepower 设备的以太网上行链路的详细信息。
例如：

FPR2100 /eth-uplink # show detail
    Ethernet Uplink:
        Mode: Security Node
        MAC Table Aging Time (dd:hh:mm:ss): 00:04:01:40
        VLAN Port Count Optimization: Disabled
        Current Task:
scope fabric a
进入以太网-上行链路接口模式。在此模式下，可以查看端口通道、统计信息和接口信息。
例如：

FPR2100 /eth-uplink/fabric # show interface
Interface:
    Port Name      Port Type          Admin State Oper State       State Reason
    -------------- ------------------ ----------- ---------------- ------------
    Ethernet1/1    Data               Enabled     Up               Up
    Ethernet1/2    Data               Enabled     Link Down        Down
    Ethernet1/3    Data               Disabled    Link Down        Down
    Ethernet1/4    Data               Disabled    Link Down        Down
    Ethernet1/5    Data               Disabled    Link Down        Down
    Ethernet1/6    Data               Disabled    Link Down        Down
    Ethernet1/7    Data               Disabled    Link Down        Down
    Ethernet1/8    Data               Disabled    Link Down        Down
    Ethernet1/9    Data               Disabled    Link Down        Down
    Ethernet1/10   Data               Disabled    Link Down        Down
    Ethernet1/11   Data               Disabled    Link Down        Down
    Ethernet1/12   Data               Disabled    Link Down        Down
    Ethernet1/13   Data               Disabled    Link Down        Down
    Ethernet1/14   Data               Disabled    Link Down        Down
    Ethernet1/15   Data               Disabled    Link Down        Down
    Ethernet1/16   Data               Disabled    Link Down        Down
    Ethernet2/1    Data               Disabled    Link Down        Down
    Ethernet2/2    Data               Disabled    Link Down        Down
    Ethernet2/3    Data               Disabled    Link Down        Down
    Ethernet2/4    Data               Disabled    Link Down        Down
    Ethernet2/5    Data               Disabled    Link Down        Down
    Ethernet2/6    Data               Disabled    Link Down        Down
    Ethernet2/7    Data               Disabled    Link Down        Down
    Ethernet2/8    Data               Disabled    Link Down        Down

FPR2100 /eth-uplink/fabric # show port-channel
    Port Channel:
        Port Channel Id Name             Port Type          Admin State            Oper State            State Reason
        --------------- ---------------- ------------------           -----------               ----------------           ------------
        1               Port-channel1    Data               Disabled                       Link Down                      Down

FPR2100 /eth-uplink/fabric/port-channel # show stats
    Ether Error Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/err-stats
        Suspect: No
        Rcv (errors): 0
        Align (errors): 0
        Fcs (errors): 0
        Xmit (errors): 0
        Under Size (errors): 0
        Out Discard (errors): 0
        Deferred Tx (errors): 0
        Int Mac Tx (errors): 0
        Int Mac Rx (errors): 0
        Thresholded: Xmit Delta Min     
    Ether Loss Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/loss-stats
        Suspect: No
        Single Collision (errors): 0
        Multi Collision (errors): 0
        Late Collision (errors): 0
        Excess Collision (errors): 0
        Carrier Sense (errors): 0
        Giants (errors): 0
        Symbol (errors): 0
        SQE Test (errors): 0
        Thresholded: 0
    Ether Pause Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/pause-stats
        Suspect: No
        Recv Pause (pause): 0
        Xmit Pause (pause): 0
        Resets (resets): 0
        Thresholded: 0
    Ether Rx Stats:
        Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/rx-stats
        Suspect: No
        Total Packets (packets): 0
        Unicast Packets (packets): 0
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 0
        Total Bytes (bytes): 0
        Jumbo Packets (packets): 0
        Thresholded: 0
    Ether Tx Stats:
       Time Collected: 2016-11-14T21:27:16.386
        Monitored Object: fabric/lan/A/pc-1/tx-stats
        Suspect: No
        Total Packets (packets): 0
        Unicast Packets (packets): 0
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 0
        Total Bytes (bytes): 0
        Jumbo Packets (packets): 0
    FPR2100 /eth-uplink/fabric/interface # show stats
    Ether Error Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/err-stats
        Suspect: No
        Rcv (errors): 0
        Align (errors): 0
        Fcs (errors): 0
        Xmit (errors): 0
        Under Size (errors): 0
        Out Discard (errors): 0
        Deferred Tx (errors): 0
        Int Mac Tx (errors): 0
        Int Mac Rx (errors): 0
        Thresholded: Xmit Delta Min     
    Ether Loss Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/loss-stats
        Suspect: No
        Single Collision (errors): 0
        Multi Collision (errors): 0
        Late Collision (errors): 0
        Excess Collision (errors): 0
        Carrier Sense (errors): 0
        Giants (errors): 7180
        Symbol (errors): 0
        SQE Test (errors): 0
        Thresholded: 0     
    Ether Pause Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/pause-stats
        Suspect: No
        Recv Pause (pause): 0
        Xmit Pause (pause): 0
        Resets (resets): 0
        Thresholded: 0
    Ether Rx Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/rx-stats
        Suspect: No
        Total Packets (packets): 604527
        Unicast Packets (packets): 142906
        Multicast Packets (packets): 339031
        Broadcast Packets (packets): 122590
        Total Bytes (bytes): 59805045
        Jumbo Packets (packets): 0
        Thresholded: 0
    Ether Tx Stats:
        Time Collected: 2016-11-14T21:27:46.395
        Monitored Object: sys/switch-A/slot-1/switch-ether/port-1/tx-stats
        Suspect: No
        Total Packets (packets): 145018
        Unicast Packets (packets): 145005
        Multicast Packets (packets): 0
        Broadcast Packets (packets): 13
        Total Bytes (bytes): 13442404
        Jumbo Packets (packets): 0
        Thresholded: 0

交换矩阵互联模式故障排除命令

使用以下交换矩阵互联模式 FXOS CLI 命令可解决 Firepower 系统的问题。

show card
显示有关交换矩阵卡的信息。
例如：
    FPR2100 /fabric-interconnect # show card detail expand
    Fabric Card:
        Id: 1
        Description: Cisco SSP FPR 2130 Base Module
        Number of Ports: 16
        State: Online
        Vendor: Cisco Systems, Inc.
        Model: FPR-2130
        HW Revision: 0
        Serial (SN): JAD2012091X
        Perf: N/A
        Operability: Operable
        Overall Status: Operable
        Power State: Online
        Presence: Equipped
        Thermal Status: N/A
        Voltage Status: N/A
show image
显示所有可用的映像。
firepower /firmware # show image
Name                                          Type                 Version
--------------------------------------------- -------------------- -------
cisco-asa-9.10.1.csp                          Firepower Cspapp     9.10.1
cisco-asa-9.9.2.csp                           Firepower Cspapp     9.9.2
fxos-k8-fp2k-firmware.0.4.04.SPA              Firepower Firmware   0.4.04
fxos-k8-fp2k-lfbff.82.1.1.303i.SSA            Firepower System     82.1(1.303i)
fxos-k8-fp2k-npu.82.1.1.303i.SSA              Firepower Npu        82.1(1.303i)
fxos-k8-fp2k-npu.82.1.1.307i.SSA              Firepower Npu        82.1(1.307i)
fxos-k9-fp2k-manager.82.1.1.303i.SSA          Firepower Manager    82.1(1.303i)
show package
显示所有可用的软件包。

firepower /firmware # show package
    Name                                          Package-Vers
    --------------------------------------------- ------------
    cisco-ftd-fp2k.9.10.1.SSA                     9.10.1
    cisco-ftd-fp2k.9.9.2.SSA                      9.9.2
show package package_name expand
显示软件包详细信息。
    firepower /firmware # show package cisco-ftd-fp2k.9.10.1.SSA expand
    Package cisco-ftd-fp2k.9.10.1.SSA:
        Images:
            cisco-asa.9.10.1.csp
            fxos-k8-fp2k-firmware.0.4.04.SPA
            fxos-k8-fp2k-lfbff.82.1.1.303i.SSA
            fxos-k8-fp2k-npu.82.1.1.303i.SSA
            fxos-k9-fp2k-manager.82.1.1.303i.SSA
scope auto-install
进入自动安装模式。在此模式下，可以查看当前的 FXOS 升级状态。

firepower /firmware/auto-install # show     
    Firmware Auto-Install:
        Package-Vers Oper State                   Upgrade State
        ------------ ---------------------------- -------------
        9.10.1            Scheduled                    Installing Application
scope firmware
进入固件模式。在此模式下，可以查看下载任务信息。
例如：

FPR2100 /firmware # show download-task
    Download task:
        File Name                                      Protocol Server          Port       Userid          State
        ---------                                      -------- --------------- ---------- --------------- -----
        cisco-ftd-fp2k.9.10.1.SSA                      Scp      172.29.191.78            0 danp            Downloaded
        cisco-ftd-fp2k.9.9.1.SSA                       Scp      172.29.191.78            0 danp            Downloaded
scope download-task
进入下载任务模式。在此模式下，可以查看有关每项下载任务的更多详细信息并重新启动下载任务。
例如：
Download task:
    File Name: test.SSA
    Protocol: Scp
    Server: 172.29.191.78
    Port: 0
    Userid: user
    Path: /tmp
    Downloaded Image Size (KB): 0
    Time stamp: 2016-11-15T19:42:29.854
    State: Failed
    Transfer Rate (KB/s): 0.000000
    Current Task: deleting downloadable test.SSA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
firepower /firmware/download-task # show fsm status 
File Name: test.SSA
    FSM 1:
        Remote Result: End Point Failed
        Remote Error Code: ERR MO Illegal Iterator State
        Remote Error Description: End point timed out. Check for IP, port, password, disk space or network access related issues.#
        Status: Download Fail
        Previous Status: Download Fail
        Timestamp: 2016-11-15T19:42:29.854
        Try: 2
        Progress (%): 0
        Current Task: deleting downloadable test.SSA on local(FSM-STAGE:sam:dme:FirmwareDownloaderDownload:DeleteLocal)
    firepower /firmware/download-task # restart
    Password:
scope psu
进入电源装置模式。在此模式下，可以查看有关电源装置的详细信息。
例如：
    FPR2100 /chassis #  show psu expand detail     
    PSU:
        PSU: 1
        Overall Status: Powered Off
        Operability: Unknown
        Power State: Off
        Presence: Equipped
        Voltage Status: Unknown
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok
        PSU: 2
        Overall Status: Operable
        Operability: Operable
        Power State: On
        Presence: Equipped
        Voltage Status: Ok
        Product Name: Cisco Firepower 2000 Series AC 400W Power Supply
        PID: FPR2K-PWR-AC-400
        VID: V01
        Vendor: Cisco Systems, Inc
        Serial (SN): LIT2010CAFE
        Type: AC
        Fan Status: Ok

平台模式下 Firepower 2100 的 Connect Local-Mgmt 故障排除命令

使用以下 connect local-mgmt 模式 FXOS CLI 命令在平台模式下解决 Firepower 2100 的问题。要访问 connect local-mgmt 模式，请输入：

FPR2100# connect local-mgmt

show lacp
显示有关 EtherChannel LACP 的详细信息。
例如：

FPR2100(local-mgmt)# show lacp neighborFlags:  S - Device is requesting Slow LACPDUs
        F - Device is requesting Fast LACPDUs
        A - Device is in Active mode       P - Device is in Passive mode

Channel group: 11

Partner (internal) information:

          Partner                 Partner                       Partner
Port      System ID             Port Number     Age         Flags
Eth1/1    32768,286f.7fec.5980  0x10e           13 s        FA


          LACP Partner           Partner           Partner
          Port Priority        Oper Key        Port State
          32768                0x16            0x3f

          Port State Flags Decode:
          Activity:   Timeout:   Aggregation:   Synchronization:
          Active      Long       Yes            Yes

          Collecting:   Distributing:   Defaulted:   Expired:
          Yes           Yes             No           No

          Partner                 Partner                       Partner
Port      System ID             Port Number     Age         Flags
Eth1/2    32768,286f.7fec.5980  0x10f           5  s        FA

          LACP Partner           Partner           Partner
          Port Priority        Oper Key        Port State
          32768                0x16            0x3f

          Port State Flags Decode:
          Activity:   Timeout:   Aggregation:   Synchronization:
          Active      Long       Yes            Yes

          Collecting:   Distributing:   Defaulted:   Expired:
          Yes           Yes             No           No



FP2100(local-mgmt)# show lacp counters

             LACPDUs         Marker      Marker Response    LACPDUs
Port       Sent   Recv     Sent   Recv    Sent    Recv      Pkts Err
---------------------------------------------------------------------
Channel group: 11
Eth1/1     4435   3532     0      0        0      0         0
Eth1/2     4566   3532     0      0        0      0         0
show portchannel
显示有关 EtherChannels 的详细信息。
例如：

FPR2100(local-mgmt)# show portchannel summary
Flags:  D - Down        P - Up in port-channel (members)
I - Individual  H - Hot-standby (LACP only)
s - Suspended   r - Module-removed
S - Switched    R - Routed
U - Up (port-channel)
M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
11    Po11(U)     Eth      LACP      Eth1/1(P)    Eth1/2(P)
show portmanager
显示有关物理接口的详细信息。
例如：

FPR2100(local-mgmt)# show portmanager counters ethernet 1 1
Good Octets Received                              : 105503260
Bad Octets Received                               : 0
MAC Transmit Error                                : 0
Good Packets Received                             : 1376050
Bad Packets Received                              : 0
BRDC Packets Received                             : 210
MC Packets Received                               : 1153664
Size 64                                           : 1334830
Size 65 to 127                                    : 0
Size 128 to 255                                   : 0
Size 256 to 511                                   : 41220
Size 512 to 1023                                  : 0
Size 1024 to Max                                  : 0
Good Octets Sent                                  : 0
Good Packets Sent                                 : 0
Excessive Collision                               : 0
MC Packets Sent                                   : 0
BRDC Packets Sent                                 : 0
Unrecognized MAC Received                         : 0
FC Sent                                           : 0
Good FC Received                                  : 0
Drop Events                                       : 0
Undersize Packets                                 : 0
Fragments Packets                                 : 0
Oversize Packets                                  : 0
Jabber Packets                                    : 0
MAC RX Error Packets Received                     : 0
Bad CRC                                           : 0
Collisions                                        : 0
Late Collision                                    : 0
bad FC Received                                   : 0
Good UC Packets Received                          : 222176
Good UC Packets Sent                              : 0
Multiple Packets Sent                             : 0
Deferred Packets Sent                             : 0
Size 1024 to 15180                                : 0
Size 1519 to Max                                  : 0
txqFilterDisc                                     : 0
linkChange                                        : 1


    

FPR2100(local-mgmt)# show portmanager port-info ethernet 1 1
port_info:
        if_index:    0x1081000
        type:        PORTMGR_IPC_MSG_PORT_TYPE_PHYSICAL
        mac_address: 2c:f8:9b:1e:8f:d6
        flowctl:     PORTMGR_IPC_MSG_FLOWCTL_NONE
        role:        PORTMGR_IPC_MSG_PORT_ROLE_NPU
        admin_state: PORTMGR_IPC_MSG_PORT_STATE_ENABLED
        oper_state:  PORTMGR_IPC_MSG_PORT_STATE_UP
        admin_speed: PORTMGR_IPC_MSG_SPEED_AUTO
        oper_speed:  PORTMGR_IPC_MSG_SPEED_1GB
        admin_mtu:   9216
        admin_duplex: PORTMGR_IPC_MSG_PORT_DUPLEX_AUTO
        oper_duplex: PORTMGR_IPC_MSG_PORT_DUPLEX_FULL
        pc_if_index: 0x0
        pc_membership_status: PORTMGR_IPC_MSG_MMBR_NOT_MEMBER
        pc_protocol: PORTMGR_IPC_MSG_PORT_CHANNEL_PRTCL_NONE
        native_vlan: 101
        num_allowed_vlan: 1
                allowed_vlan[0]: 101
        PHY Data:
        PAGE IFC OFFSET VALUE  | PAGE IFC OFFSET VALUE
        ---- --- ------ -----  | ---- --- ------ -----
         0    0  0x0000 0x1140 |  0    0  0x0001 0x796d
         0    0  0x0002 0x0141 |  0    0  0x0003 0x0ee1
         0    0  0x0004 0x03e3 |  0    0  0x0005 0xc1e1
         0    0  0x0006 0x000f |  0    0  0x0007 0x2001
         0    0  0x0008 0x4f08 |  0    0  0x0009 0x0f00
         0    0  0x000a 0x3800 |  0    0  0x000f 0x3000
         0    0  0x0010 0x3070 |  0    0  0x0011 0xac08
         0    0  0x0012 0x0000 |  0    0  0x0013 0x1c40
         0    0  0x0014 0x8020 |  0    0  0x0015 0x0000
        18    0  0x001b 0x0000 | 



FPR2100(local-mgmt)# show portmanager switch mac-filters
port ix          MAC                mask        action      packets       bytes

00   0ba  2C:F8:9B:1E:8F:D7  FF:FF:FF:FF:FF:FF  FORWARD
     0c9  01:80:C2:00:00:02  FF:FF:FF:FF:FF:FF  FORWARD
     0cc  2C:F8:9B:1E:8F:F7  FF:FF:FF:FF:FF:FF  FORWARD
     0cf  FF:FF:FF:FF:FF:FF  FF:FF:FF:FF:FF:FF  FORWARD
     b70  00:00:00:00:00:00  01:00:00:00:00:00  DROP         222201    14220864
     bb8  01:00:00:00:00:00  01:00:00:00:00:00  DROP        1153821    91334968

01   0bd  2C:F8:9B:1E:8F:D6  FF:FF:FF:FF:FF:FF  FORWARD
     0c0  01:80:C2:00:00:02  FF:FF:FF:FF:FF:FF  FORWARD
     0c3  2C:F8:9B:1E:8F:F6  FF:FF:FF:FF:FF:FF  FORWARD
     0c6  FF:FF:FF:FF:FF:FF  FF:FF:FF:FF:FF:FF  FORWARD         210       13440
     b73  00:00:00:00:00:00  01:00:00:00:00:00  DROP         222201    14220864
     bbb  01:00:00:00:00:00  01:00:00:00:00:00  DROP        1153795    91281055 
<...>



FPR2100(local-mgmt)# show portmanager switch status
Dev/Port         Mode        Link   Speed  Duplex  Loopback Mode
---------  ----------------  -----  -----  ------  -------------

0/0             QSGMII        Up     1G     Full    None
0/1             QSGMII        Up     1G     Full    None
0/2             QSGMII       Down    1G     Half    None
0/3             QSGMII       Down    1G     Half    None
0/4             QSGMII       Down    1G     Half    None
0/5             QSGMII       Down    1G     Half    None
0/6             QSGMII        Up     1G     Full    None
0/7             QSGMII       Down    1G     Half    None
0/48            QSGMII       Down    1G     Half    None
0/49            QSGMII       Down    1G     Half    None
0/50            QSGMII       Down    1G     Half    None
0/51            QSGMII       Down    1G     Half    None
0/52              KR          Up     40G    Full    None
0/56            SR_LR        Down    10G    Full    None
0/57            SR_LR        Down    10G    Full    None
0/58            SR_LR        Down    10G    Full    None
0/59            SR_LR        Down    10G    Full    None
0/64            SR_LR        Down    10G    Full    None
0/65            SR_LR        Down    10G    Full    None
0/66            SR_LR        Down    10G    Full    None
0/67            SR_LR        Down    10G    Full    None
0/68            SR_LR        Down    10G    Full    None
0/69            SR_LR        Down    10G    Full    None
0/70            SR_LR        Down    10G    Full    None
0/71            SR_LR        Down    10G    Full    None
0/80              KR          Up     10G    Full    None
0/81              KR         Down    10G    Full    None
0/83              KR          Up     10G    Full    None

安全服务模式故障排除命令

使用以下安全服务 (ssa) 模式 FXOS CLI 命令可排除 Firepower 系统的故障问题。

show app
显示有关连接到 Firpower 设备的应用的信息。
例如：

firepower /ssa # show app     
    Application:
        Name       Version    Description Author     Deploy Type CSP Type    Is Default App
        ---------- ---------- ----------- ---------- ----------- ----------- --------------
        asa        9.10.1     N/A         cisco      Native      Application Yes
        asa        9.9.2      N/A         cisco      Native      Application No

Was this Document Helpful?

FeedbackFeedback

Contact Cisco