76-6
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 76 Troubleshooting
Testing Your Configuration
• The IP address of the device pinged or a device name, if available. The name of the device, if
assigned Hosts/Networks, may be displayed, even if NO response is the result.
• When the ping is transmitted, a millisecond timer starts with a specified maximum, or timeout value.
This timer is useful for testing the relative response times of different routes or activity levels.
• Example Ping output:
Sending 5, 100-byte ICMP Echos to out-pc, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
If the ping fails, the output is as follows:
Sending 5, 100-byte ICMP Echos to 10.132.80.101, timeout is 2 seconds:
?????
Success rate is 0 percent (0/5)
Step 5 To enter a new IP address, click Clear Screen to remove the previous response from the Ping output area.
Determining Packet Routing with Traceroute
The Traceroute tool helps you to determine the route that packets will take to their destination. The tool
prints the result of each probe sent. Every line of output corresponds to a TTL value in increasing order.
The following table lists the output symbols printed by this tool.
To use the Traceroute tool, perform the following steps:
Step 1 In the main ASDM application window, choose Tools > Traceroute.
The Traceroute dialog box appears.
Step 2 Enter the name of the host to which the route is traced. If the hostname is specified, define it by choosing
Configuration > Firewall > Objects > IP Names, or configure a DNS server to enable this tool to
resolve the hostname to an IP address.
Step 3 Enter the amount of time in seconds to wait for a response before the connection times out. The default
is three seconds.
Step 4 Type the destination port used by the UDP probe messages. The default is 33434.
Step 5 Enter the number of probes to be sent at each TTL level. The default is three.
Output Symbol Description
* No response was received for the probe within the timeout period.
nn msec For each node, the round-trip time (in milliseconds) for the specified number of
probes.
!N. ICMP network unreachable.
!H ICMP host unreachable.
!P ICMP unreachable.
!A ICMP administratively prohibited.
? Unknown ICMP error.
To Next Page
Loading...
Need help?
General
