Verifying the RPC ALG Tables

To verify the RPC ALG, perform these tasks:

• Display the MS UUID mapping table

Display the Sun RPC Port Mapping Table

Purpose

Display the Sun RPC port map table. The Sun RPC ALG monitors packets on TCP or UDP port 111.

Action

From the CLI, enter the show security alg sunrpc portmap command.

IP                 Port    Protocol   Program
10.209.17.127      32835   TCP        100005
10.209.17.127      2049    UDP        100003
10.209.17.127      111     UDP        100000
10.209.17.127      111     TCP        100000

What it Means

The output displays the server IP address, TCP or UDP port, and corresponding program number for each program being called with the Sun RPC ALG process:

• Server's IP address and port that maps to the program
• Protocol used to support the process
• Program ID number

Display the MS RPC UUID Mapping Table

Purpose

Display the MS RPC UUID-to-Object ID (OID) map table. The MS RPC ALG monitors packets on TCP port 135. (You can display the MS RPC port map table with the show security alg msrpc portmap command.)

Action

From the CLI, enter the show security alg msrpc object-id-map command.

UUID                                      OID
1be617c0-31a5-11cf-a7d8-00805f48a135      0x80000020
e3514235-4b06-11d1-ab04-00c04fc2dcd2      0x80000002      
67df7c70-0f04-11ce-b13f-00aa003bac6c      0x80000014 

What it Means

The output displays mapping of the UUID to the OIDs. Verify the following information:

• MS RPC UUID
• MS RPC object ID

Related Topics

• Understanding the RPC ALG
• Disabling and Enabling RPC ALG