Cisco Systems Problems with the Authentication Proxy

63-19
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter63 Configuring the ASA CX Module
Troubleshooting the ASA CX Module
Reloading or Resetting the Module
To reload or reset the module, enter one of the following commands at the ASA CLI.
Detailed Steps
Shutting Down the Module
If you restart the ASA, the module is not automatically restarted. To shut down the module, perform the
following steps at the ASA CLI.
Detailed Steps
Problems with the Authentication Proxy
If you are having a problem using the authentication proxy feature, follow these steps to troubleshoot
your configuration and connections:
1. Check your configurations.
•On the ASA, check the output of the show asp table classify domain cxsc-auth-proxy command
and make sure there are rules installed and that they are correct.
•In PRSM, ensure the directory realm is created with the correct credentials and test the connection
to make sure you can reach the authentication server; also ensure that a policy object or objects are
configured for authentication.
2. Check the output of the show service-policy cxsc command to see if any packets were proxied.
Command Purpose
hw-module module 1 reload
Example:
hostname# hw-module module 1 reload
Reloads the module software.
hw-module module 1 reset
Example:
hostname# hw-module module 1 reset
Performs a reset, and then reloads the module.
Command Purpose
hw-module module 1 shutdown
Example:
hostname# hw-module module 1 shutdown
Shuts down the module.