Troubleshooting - Cisco ASA 5505 Configuration Manual

Troubleshooting

This chapter describes how to troubleshoot the adaptive security appliance, and includes the following
sections:
•
•
•
Testing Your Configuration
This section describes how to test connectivity for the single mode adaptive security appliance or for
each security context, how to ping the adaptive security appliance interfaces, and how to allow hosts on
one interface to ping through to hosts on another interface.
This section includes the following topics:
•
•
•
•
•
Pinging Adaptive Security Appliance Interfaces
To test whether the adaptive security appliance interfaces are up and running and that the adaptive
security appliance and connected routers are operating correctly, you can ping the adaptive security
appliance interfaces. To ping the adaptive security appliance interfaces, perform the following steps:
Draw a diagram of your single-mode adaptive security appliance or security context that shows the
Step 1
interface names, security levels, and IP addresses.
Note
OL-20339-01
Testing Your Configuration, page 76-1
Other Troubleshooting Tools, page 76-8
Common Problems, page 76-13
Pinging Adaptive Security Appliance Interfaces, page 76-1
Passing Traffic Through the Adaptive Security Appliance, page 76-3
Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping, page 76-3
Determining Packet Routing with Traceroute, page 76-6
Tracing Packets with Packet Tracer, page 76-7
Although this procedure uses IP addresses, the ping command also supports DNS names and
names that are assigned to a local IP address with the name command.
C H A P T E R
Cisco ASA 5500 Series Configuration Guide using ASDM
76
76-1