Filter
Top Products
24-3
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 24 Troubleshooting Connections and Resources
Testing Your Configuration
Figure 24-3 Ping Failure Because of IP Addressing Problems
Step 3
Ping each ASA interface from a remote host. For transparent mode, ping the management IP address.
This test checks whether the directly connected router can route the packet between the host and the
ASA, and whether the ASA can correctly route the packet back to the host.
A ping might fail if the ASA does not have a return route to the host through the intermediate router (see
Figure 24-4). In this case, the debugging messages show that the ping was successful, but syslog
message 110001 appears, indicating a routing failure has occurred.
Figure 24-4 Ping Failure Because the ASA Has No Return Route
Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping
The Ping tool is useful for verifying the configuration and operation of the ASA and surrounding
communications links, as well as for testing other network devices.
This section includes the following topics:
• Information About Ping, page 24-3
• Pinging From an ASA Interface, page 24-4
• Pinging to an ASA Interface, page 24-4
• Pinging Through the ASA Interface, page 24-4
• Troubleshooting the Ping Tool, page 24-4
• Using the Ping Tool, page 24-5
Information About Ping
A ping is sent to an IP address and it returns a reply. This process enables network devices to discover,
identify, and test each other.
The Ping tool uses ICMP (as described in RFC 777 and RFC 792) to define an echo request-and-reply
transaction between two network devices. The echo request packet is sent to the IP address of a network
device. The receiving device reverses the source and destination address and sends the packet back as
the echo reply.
192.168.1.1192.168.1.2
192.168.1.2
Ping
Router
Security
Appliance
Host
126696
Ping
ASA
Router
330860