CHAPTE R
24-1
Cisco ASA Series Firewall CLI Configuration Guide
24
Troubleshooting Connections and Resources
This chapter describes how to troubleshoot the ASA and includes the following sections:
Testing Your Configuration, page24-1
Monitoring Per-Process CPU Usage, page24-7

Testing Your Configuration

This section describes how to test connectivity for the single mode ASA or for each security context,
how to ping the ASA interfaces, and how to allow hosts on one interface to ping through to hosts on
another interface.
We recommend that you only enable pinging and debugging messages during troubleshooting. When
you are done testing the ASA, follow the steps in the “Disabling the Test Configuration” section on
page 24-6.
This section includes the following topics:
Enabling ICMP Debugging Messages and Syslog Messages, page24-2
Pinging ASA Interfaces, page24-3
Passing Traffic Through the ASA, page24-5
Disabling the Test Configuration, page24-6
Determining Packet Routing with Traceroute, page24-7
Tracing Packets with Packet Tracer, page24-7