Cisco ASA 5506-X Configuration Manual page 294

Testing Your Configuration
Figure 13-1 Network Diagram with Interfaces, Routers, and Hosts
Host
10.1.1.56
Router
dmz1
209.165.201.1
192.1
68.1.
dmz2
192.168.2.1
192.168.0.1
security40
security100
Router
10.1.2.90
Host
Ping each ASA interface from the directly connected routers. For transparent mode, ping the
Step 2
management IP address. This test ensures that the ASA interfaces are active and that the interface
configuration is correct.
A ping might fail if the ASA interface is not active, the interface configuration is incorrect, or if a switch
between the ASA and a router is down (see the following figure). In this case, no debugging messages
or syslog messages appear, because the packet never reaches the ASA.
Figure 13-2
Host
If the ping reply does not return to the router, then a switch loop or redundant IP addresses might exist
(see the following figure).
Cisco ASA Series Firewall CLI Configuration Guide
13-6
Host
209.265.200.230
Router
outside
dmz3
192.1
security0
68.3.
Routed ASA
dmz4
inside
192.168.4.1
security80
Router
10.1.0.34
Host
Ping Failure at the ASA Interface
Ping
Chapter 13
Host
10.1.3.6
Router
Router
10.1.4.67
Host
Router
Troubleshooting Connections and Resources
Host
209.165.201.24
Router
outside
security0
Transp. ASA
10.1.0.3
inside
security100
Router
10.1.1.5
Host
?
ASA