Cisco ASA Series Cli Configuration Manual page 1373

Chapter 1 Troubleshooting Connections and Resources
Pinging ASA Interfaces
To test whether the ASA interfaces are up and running and that the ASA and connected routers are
operating correctly, you can ping the ASA interfaces.
To ping the ASA interfaces, perform the following steps:
Step 1
Draw a diagram of your single-mode ASA or security context that shows the interface names, security
levels, and IP addresses.
Note
The diagram should also include any directly connected routers and a host on the other side of the router
from which you will ping the ASA. You will use this information in this procedure and in the procedure
in the
Figure 1-1 Network Diagram with Interfaces, Routers, and Hosts
Host
10.1.1.56
Router
dmz1
209.165.201.1
192.1
68.1.
dmz2
192.168.2.1
192.168.0.1
security40
security100
Router
10.1.2.90
Host
Step 2
Ping each ASA interface from the directly connected routers. For transparent mode, ping the
management IP address. This test ensures that the ASA interfaces are active and that the interface
configuration is correct.
A ping might fail if the ASA interface is not active, the interface configuration is incorrect, or if a switch
between the ASA and a router is down (see
messages appear, because the packet never reaches the ASA.
Although this procedure uses IP addresses, the ping command also supports DNS names and
names that are assigned to a local IP address with the name command.
"Passing Traffic Through the ASA" section on page
Host
209.265.200.230
Router
outside
dmz3
192.1
security0
68.3.
Routed ASA
dmz4
inside
192.168.4.1
security80
Router
10.1.0.34
Host
Host
10.1.3.6
Router
Router
10.1.4.67
Host
Figure 1-2). In this case, no debugging messages or syslog
Cisco ASA Series CLI Configuration Guide
Testing Your Configuration
1-5. (See Figure 1-1.)
Host
209.165.201.24
Router
outside
security0
Transp. ASA
10.1.0.3
inside
security100
Router
10.1.1.5
Host
1-3