topic The commands I mentioned have in Network Security

ASA Equivalent to show interface summary on a router

Dean Romanelli — Tue, 12 Mar 2019 04:52:11 GMT

Hi All,

What is the equivalent to the Cisco router command "show interface summary" for an ASA? If you are not familiar, this commands prints current TXD/RXD bandwidth usage in a concise, neat & charted manner. Example is attached.

Thanks.

As far as I know there's no

Marvin Rhoads — Mon, 06 Oct 2014 21:38:55 GMT

As far as I know there's no equivalent command on an ASA.

We have to run a couple of commands to get a similar data set and even then it's not nice and tabular.

1. get the interfaces you care about (e.g. that have an IP Address), and

2. Grab traffic statistics for each.

sh ip adr

sh int <int number> stats | b Traffic

Output of the second command looks something like this:

ASA# sh int e0/0 stats | b Traffic

Traffic Statistics for "inside":

176390317 packets input, 40380592616 bytes

198978813 packets output, 144870043968 bytes

428718 packets dropped

1 minute input rate 68 pkts/sec, 12997 bytes/sec

1 minute output rate 64 pkts/sec, 24225 bytes/sec

1 minute drop rate, 0 pkts/sec

5 minute input rate 63 pkts/sec, 8693 bytes/sec

5 minute output rate 56 pkts/sec, 12316 bytes/sec

5 minute drop rate, 0 pkts/sec

Thank you Marvin. This will

Dean Romanelli — Tue, 07 Oct 2014 14:35:47 GMT

Thank you Marvin. This will do nicely.

How about for a PIX?

Dean Romanelli — Tue, 07 Oct 2014 14:42:16 GMT

How about for a PIX?

The commands I mentioned have

Marvin Rhoads — Tue, 07 Oct 2014 23:46:08 GMT

The commands I mentioned have been around since at least PIX 7.0.

Please tell me you're not running anything that old still. 😉

Hi, others command are:

Ciro Gustavo Mele — Sun, 11 Jun 2017 16:02:54 GMT

Hi, others command are:

ciscoasa# sh run ip
!
interface GigabitEthernet0
no nameif
no security-level
ip address 10.1.1.10 255.0.0.0

ciscoasa# sh run int

!
interface GigabitEthernet0
no nameif
no security-level
ip address 10.1.1.10 255.0.0.0
!
interface GigabitEthernet1
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet2
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet3
shutdown
no nameif
no security-level
no ip address

Good luck!

Ciro Gustavo Mele.

Re: ASA Equivalent to show interface summary on a router

kimby200602 — Fri, 21 Sep 2018 08:56:41 GMT

Hello,

I do not know if this thread is still active, but this command gives me very useful statistics about current interface bandwidth on ASA:

show traffic

HTH!

Regards, Kliment

Needing your help on getting the ASA config backup

adris.shirzad1 — Fri, 07 Aug 2020 22:41:48 GMT

this is what i am getting when i run the backup

Destination filename [ASA_Backup]?
Cryptochecksum: f2bd649c 522e87c2 cadd73d5 6c17bfbb
!!!!!!!!!

but i can't find the source where it's been saved! either i look at TFTP queue and it's not showing there, can you help me on this?

Thanks!

Re: Needing your help on getting the ASA config backup

Marvin Rhoads — Sat, 08 Aug 2020 12:10:19 GMT

@adris.shirzad1 Please start a new discussion and post more information there. For instance, the exact command you run to get the output you shared.