Cisco ASA 5505 Configuration Manual page 1696

Testing Your Configuration
•
•
•
A ping is sent to an IP address and it returns a reply. This process enables network devices to discover,
identify, and test each other.
The Ping tool uses ICMP (as described in RFC 777 and RFC 792) to define an echo request-and-reply
transaction between two network devices. The echo request packet is sent to the IP address of a network
device. The receiving device reverses the source and destination address and sends the packet back as
the echo reply.
Administrators can use the ASDM Ping interactive diagnostic tool in these ways:
•
•
•
•
•
Pinging From an Adaptive Security Appliance Interface
For basic testing of an interface, you can initiate a ping from an adaptive security appliance interface to
a network device that you know is functioning correctly and returning replies through the intermediate
communications path. For basic testing, make sure you do the following:
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
76-4
Pinging Through the Adaptive Security Appliance Interface, page 76-5
Troubleshooting the Ping Tool, page 76-5
Using the Ping Tool, page 76-5
Loopback testing of two interfaces—A ping may be initiated from one interface to another on the
same adaptive security appliance, as an external loopback test to verify basic "up" status and
operation of each interface.
Pinging to an adaptive security appliance—The Ping tool can ping an interface on another adaptive
security appliance to verify that it is up and responding.
Pinging through an adaptive security appliance—Ping packets originating from the Ping tool may
pass through an intermediate adaptive security appliance on their way to a device. The echo packets
will also pass through two of its interfaces as they return. This procedure can be used to perform a
basic test of the interfaces, operation, and response time of the intermediate unit.
Pinging to test questionable operation of a network device—A ping may be initiated from an
adaptive security appliance interface to a network device that is suspected of functioning incorrectly.
If the interface is configured correctly and an echo is not received, there may be problems with the
device.
Pinging to test intermediate communications—A ping may be initiated from an adaptive security
appliance interface to a network device that is known to be functioning correctly and returning echo
requests. If the echo is received, the correct operation of any intermediate devices and physical
connectivity is confirmed.
Verify receipt of the ping from the adaptive security appliance interface by the "known good"
device. If the ping is not received, a problem with the transmitting hardware or interface
configuration may exist.
If the adaptive security appliance interface is configured correctly and it does not receive an echo
reply from the "known good" device, problems with the interface hardware receiving function may
exist. If a different interface with "known good" receiving capability can receive an echo after
pinging the same "known good" device, the hardware receiving problem of the first interface is
confirmed.
Chapter 76 Troubleshooting
OL-20339-01