CHAPTER
81-1
Cisco ASA 5500 Series Configuration Guide using ASDM
81
Troubleshooting
This chapter describes how to troubleshoot the ASA and includes the following sections:
• Testing Your Configuration, page 81-1
• Other Troubleshooting Tools, page 81-8
• Common Problems, page 81-17
• Additional Troubleshooting, page 81-18
Testing Your Configuration
This section describes how to test connectivity for the single mode ASA or for each security context,
how to ping the ASA interfaces, and how to allow hosts on one interface to ping through to hosts on
another interface.
This section includes the following topics:
• Pinging ASA Interfaces, page 81-1
• Passing Traffic Through the ASA, page 81-3
• Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping, page 81-3
• Determining Packet Routing with Traceroute, page 81-6
• Tracing Packets with Packet Tracer, page 81-7
Pinging ASA Interfaces
To test whether the ASA interfaces are up and running and that the ASA and connected routers are
operating correctly, you can ping the ASA interfaces. To ping the ASA interfaces, perform the following
steps:
Step 1 Draw a diagram of your single-mode ASA or security context that shows the interface names, security
levels, and IP addresses.
Note Although this procedure uses IP addresses, the ping command also supports DNS names and
names that are assigned to a local IP address with the name command.
