cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

HOW TO: 'ip inspect log drop-pkt' command for FWSM?

robwu2006
Beginner
Beginner

Hi All,

I'm trying to work out if there is an equalivent FWSM command to the IOS 'ip inspect log drop-pkt' command?

IOS command I'm talking about for reference.

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_i2.html#wp1048887

Cheers!

Rob

2 REPLIES 2

padatta
Beginner
Beginner

Hi,

The IOS firewall feature can be enabled/disabled and so 'ip inspect log drop-pkt' helps in finding where packets ae dropped in IOS FW.

The FWSM/ASA is a firewall and this fuctionality cannot be disabled. Hence there is no equivalent command.

We mainly need to check into syslogs and 'show asp drop' output to know whats going on.

http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/command/reference/l2.html


http://www.cisco.com/en/US/docs/security/fwsm/fwsm41/command/reference/s2.html#wp2730137

Paps

Hi Papa, this looks great, will try this out when I'm troubleshooting next time! Cheers Rob

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: