Cisco ASA 5505 Configuration Manual page 1695

Chapter 76 Troubleshooting
If the ping reply does not return to the router, then a switch loop or redundant IP addresses may exist
(see
Figure 76-3
Router
Ping each adaptive security appliance interface from a remote host. For transparent mode, ping the
Step 3
management IP address. This test checks whether the directly connected router can route the packet
between the host and the adaptive security appliance, and whether the adaptive security appliance can
correctly route the packet back to the host.
A ping might fail if the adaptive security appliance does not have a return route to the host through the
intermediate router (see
successful, but syslog message 110001 appears, indicating a routing failure.
Figure 76-4
Host
Passing Traffic Through the Adaptive Security Appliance
After you successfully ping the adaptive security appliance interfaces, make sure traffic can pass
successfully through the adaptive security appliance. For routed mode, this test shows that NAT is
operating correctly, if configured. For transparent mode, which does not use NAT, this test confirms that
the adaptive security appliance is operating correctly. If the ping fails in transparent mode, contact Cisco
TAC.
Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping
The Ping tool is useful for verifying the configuration and operation of the adaptive security appliance
and surrounding communications links, as well as for testing other network devices.
This section includes the following topics:
•
•
OL-20339-01
Figure 76-3).
Ping Failure Because of IP Addressing Problems
Ping
192.168.1.2
192.168.1.2
Host
Figure
Ping Failure Because the Security Appliance has No Return Route
Ping
Pinging From an Adaptive Security Appliance Interface, page 76-4
Pinging to an Adaptive Security Appliance Interface, page 76-5
192.168.1.1
76-4). In this case, the debugging messages show that the ping was
Router
Cisco ASA 5500 Series Configuration Guide using ASDM
Testing Your Configuration
Security
Appliance
?
Security
Appliance
76-3