Cisco ASA Series Cli Configuration Manual page 1372

Testing Your Configuration
Enabling ICMP Debugging Messages and Syslog Messages
Debugging messages and syslog messages can help you troubleshoot why your pings are not successful.
The ASA only shows ICMP debugging messages for pings to the ASA interfaces, and not for pings
through the ASA to other hosts.
To enable debugging and syslog messages, perform the following steps:
Command
Step 1
debug icmp trace
Example:
hostname(config)# debug icmp trace
Step 2
logging monitor debug
Example:
hostname(config)# logging monitor debug
Step 3
terminal monitor
Example:
hostname(config)# terminal monitor
Step 4
logging on
Example:
hostname(config)# logging on
Examples
The following example shows a successful ping from an external host (209.165.201.2) to the ASA
outside interface (209.165.201.1):
hostname(config)# debug icmp trace
Inbound ICMP echo reply (len 32 id 1 seq 256) 209.165.201.1 > 209.165.201.2
Outbound ICMP echo request (len 32 id 1 seq 512) 209.165.201.2 > 209.165.201.1
Inbound ICMP echo reply (len 32 id 1 seq 512) 209.165.201.1 > 209.165.201.2
Outbound ICMP echo request (len 32 id 1 seq 768) 209.165.201.2 > 209.165.201.1
Inbound ICMP echo reply (len 32 id 1 seq 768) 209.165.201.1 > 209.165.201.2
Outbound ICMP echo request (len 32 id 1 seq 1024) 209.165.201.2 > 209.165.201.1
Inbound ICMP echo reply (len 32 id 1 seq 1024) 209.165.201.1 > 209.165.201.2
The output shows the ICMP packet length (32 bytes), the ICMP packet identifier (1), and the ICMP
sequence number (the ICMP sequence number starts at 0, and is incremented each time that a request is
sent).
Cisco ASA Series CLI Configuration Guide
1-2
Chapter 1
Purpose
Shows ICMP packet information for pings to the ASA interfaces.
Sets syslog messages to be sent to Telnet or SSH sessions.
Note
You can alternately use the logging buffer debug
command to send log messages to a buffer, and then view
them later using the show logging command.
Sends the syslog messages to a Telnet or SSH session.
Enables syslog message generation.
Troubleshooting Connections and Resources