CHAPT ER
81-1
Cisco ASA 5500 Series Configuration Guide using ASDM
81
Troubleshooting
This chapter describes how to troubleshoot the ASA and includes the following sections:
•Testing Your Configuration, page81-1
•Other Troubleshooting Tools, page81-8
•Common Problems, page 81-17
•Additional Troubleshooting, page81-18

Testing Your Configuration

This section describes how to test connectivity for the single mode ASA or for each security context,
how to ping the ASA interfaces, and how to allow hosts on one interface to ping through to hosts on
another interface.
This section includes the following topics:
•Pinging ASA Interfaces, page81-1
•Passing Traffic Through the ASA, page81-3
•Verifying ASA Configuration and Operation, and Testing Interfaces Using Ping, page81-3
•Determining Packet Routing with Traceroute, page81-6
•Tracing Packets with Packet Tracer, page81-7

Pinging ASA Interfaces

To test whether the ASA interfaces are up and running and that the ASA and connected routers are
operating correctly, you can ping the ASA interfaces. To ping the ASA interfaces, perform the following
steps:
Step1 Draw a diagram of your single-mode ASA or security context that shows the interface names, security
levels, and IPaddresses.
Note Although this procedure uses IP addresses, the ping command also supports DNS names and
names that are assigned to a local IP address with the name command.