Verifying and Debugging CBAC

You can check your CBAC configuration by using the show commands listed in Table 15-5. In addition to the show commands, the debug commands prove very useful in monitoring and troubleshooting your CBAC configuration.

Table 15-5. Some of the Commands Used to Check Your CBAC

Configuration

Table 15-5. Some of the Commands Used to Check Your CBAC

Configuration

Command

Purpose

show ip access-lists

Displays the contents of all current IP access lists

show ip inspect name inspection-name

Shows a particular configured inspection rule

show ip inspect config

Shows the complete CBAC inspection configuration

show ip inspect interfaces

Shows interface configuration with regard to applied inspection rules and access lists

show ip inspect session [detail]

Shows existing sessions currently being tracked and inspected by CBAC

show ip inspect all

Shows all CBAC configurations and all existing sessions currently being tracked and inspected by CBAC

0 0

Post a comment