CHAPTER
24-1
Cisco ASA Series Firewall CLI Configuration Guide
24
Troubleshooting Connections and Resources
This chapter describes how to troubleshoot the ASA and includes the following sections:
• Testing Your Configuration, page 24-1
• Monitoring Per-Process CPU Usage, page 24-7
Testing Your Configuration
This section describes how to test connectivity for the single mode ASA or for each security context,
how to ping the ASA interfaces, and how to allow hosts on one interface to ping through to hosts on
another interface.
We recommend that you only enable pinging and debugging messages during troubleshooting. When
you are done testing the ASA, follow the steps in the “Disabling the Test Configuration” section on
page 24-6.
This section includes the following topics:
• Enabling ICMP Debugging Messages and Syslog Messages, page 24-2
• Pinging ASA Interfaces, page 24-3
• Passing Traffic Through the ASA, page 24-5
• Disabling the Test Configuration, page 24-6
• Determining Packet Routing with Traceroute, page 24-7
• Tracing Packets with Packet Tracer, page 24-7
