EasyManuals Logo

Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

Cisco 5510 - ASA SSL / IPsec VPN Edition
1822 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #1695 background imageLoading...
Page #1695 background image
76-3
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 76 Troubleshooting
Testing Your Configuration
If the ping reply does not return to the router, then a switch loop or redundant IP addresses may exist
(see Figure 76-3).
Figure 76-3 Ping Failure Because of IP Addressing Problems
Step 3
Ping each adaptive security appliance interface from a remote host. For transparent mode, ping the
management IP address. This test checks whether the directly connected router can route the packet
between the host and the adaptive security appliance, and whether the adaptive security appliance can
correctly route the packet back to the host.
A ping might fail if the adaptive security appliance does not have a return route to the host through the
intermediate router (see Figure 76-4). In this case, the debugging messages show that the ping was
successful, but syslog message 110001 appears, indicating a routing failure.
Figure 76-4 Ping Failure Because the Security Appliance has No Return Route
Passing Traffic Through the Adaptive Security Appliance
After you successfully ping the adaptive security appliance interfaces, make sure traffic can pass
successfully through the adaptive security appliance. For routed mode, this test shows that NAT is
operating correctly, if configured. For transparent mode, which does not use NAT, this test confirms that
the adaptive security appliance is operating correctly. If the ping fails in transparent mode, contact Cisco
TAC .
Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping
The Ping tool is useful for verifying the configuration and operation of the adaptive security appliance
and surrounding communications links, as well as for testing other network devices.
This section includes the following topics:
• Pinging From an Adaptive Security Appliance Interface, page 76-4
• Pinging to an Adaptive Security Appliance Interface, page 76-5
192.168.1.1192.168.1.2
192.168.1.2
Ping
Router
Security
Appliance
Host
126696
Ping
Router
Host
?
Security
Appliance
126693

Table of Contents

Other manuals for Cisco 5510 - ASA SSL / IPsec VPN Edition

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco 5510 - ASA SSL / IPsec VPN Edition and is the answer not in the manual?

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General IconGeneral
BrandCisco
Model5510 - ASA SSL / IPsec VPN Edition
CategoryFirewall
LanguageEnglish

Related product manuals