Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

FWSM: What source IP is hitting the inbound

Can some advice me of commands that will explicitly indicate if a source ip or subnet is arriving on an interface. (The source could be allowd or not allowed)

4 REPLIES

Re: FWSM: What source IP is hitting the inbound

Do you mean to to capture the packets from a particular source once they reach the firewall or do you want to know IF a packet with this specific source IP would come will it be allowed through?

For the first you have the capture command on the FWSM AFAIK. For the second command there is no 'automated' process on the FWSM. On the ASA/PIX there is! Its called the 'packet-tracer' command. On the FWSM you can just check the ACL applied on that interface manually.

Regards

Farrukh

New Member

Re: FWSM: What source IP is hitting the inbound

Dear Farrukh,

Thanks for the reply. The capture command proved useful.

However, I would like to know how to display the details of currently active connections, such as source IP etc...

Cisco Employee

Re: FWSM: What source IP is hitting the inbound

Hi,

Below is the URL that has some useful show commands to monitor the Pix/ASA. Even though the document talks about Pix/ASA, you could use the same commands to monitor the FWSM as well.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009491c.shtml

Regards,

Arul

*Pls rate if it helps*

Re: FWSM: What source IP is hitting the inbound

You can use the 'show connection' command for tihs purpose. It also has some optional keywords like 'detailed' etc.

You can also download an evaluation of fireplotter (fireplotter.com) to get a nice filterable GUI.

Regards

Farrukh

121
Views
4
Helpful
4
Replies