Cisco ASA 5505 Configuration Manual page 1697

Chapter 76 Troubleshooting
Pinging to an Adaptive Security Appliance Interface
When you try to ping to an adaptive security appliance interface, verify that the pinging response (ICMP
echo reply) is enabled for that interface by choosing Tools > Ping. When pinging is disabled, the
adaptive security appliance cannot be detected by other devices or software applications, and does not
respond to the ASDM Ping tool.
Pinging Through the Adaptive Security Appliance Interface
To verify that other types of network traffic from "known good" sources are being passed through the
adaptive security appliance, choose Monitoring > Interfaces > Interface Graphs or an SNMP
management station.
To enable internal hosts to ping external hosts, configure ICMP access correctly for both the inside and
outside interfaces by choosing Configuration > Firewall > Objects > IP Names.
Troubleshooting the Ping Tool
When pings fail to receive an echo, it may be the result of a configuration or operational error in a
adaptive security appliance, and not necessarily because of no response from the IP address being
pinged. Before using the Ping tool to ping from, to, or through an adaptive security appliance interface,
perform the following basic checks:
•
•
•
Using the Ping Tool
To use the Ping tool, perform the following steps:
In the main ASDM application window, choose Tools > Ping.
Step 1
The Ping dialog box appears.
Enter the destination IP address for the ICMP echo request packets in the IP Address field.
Step 2
Ping can also accept IPv6 addresses.
Note
(Optional) Choose the adaptive security appliance interface that transmits the echo request packets from
Step 3
the drop-down list. If it is not specified, the adaptive security appliance checks the routing table to find
the destination address and uses the required interface.
Click Ping to send an ICMP echo request packet from the specified or default interface to the specified
Step 4
IP address and start the response timer.
The response appears in the Ping Output area. Three attempts are made to ping the IP address, and results
display the following fields:
OL-20339-01
Verify that interfaces are configured by choosing Configuration > Device Setup > Interfaces.
Verify that devices in the intermediate communications path, such as switches or routers, are
correctly delivering other types of network traffic.
Make sure that traffic of other types from "known good" sources is being passed by choosing
Monitoring > Interfaces > Interface Graphs.
If a hostname has been assigned in the Configuration > Firewall > Objects > IP Names pane, you
can use the hostname in place of the IP address.
Cisco ASA 5500 Series Configuration Guide using ASDM
Testing Your Configuration
76-5