Troubleshooting The Security Appliance; Testing Your Configuration; Enabling Icmp Debug Messages And System Log Messages - Cisco PIX 500 Series Configuration Manual

Troubleshooting the Security Appliance

This chapter describes how to troubleshoot the security appliance, and includes the following sections:
•
•
•
•
•
•
•

Testing Your Configuration

This section describes how to test connectivity for the single mode security appliance or for each security
context, how to ping the security appliance interfaces, and how to allow hosts on one interface to ping
through to hosts on another interface.
We recommend that you only enable pinging and debug messages during troubleshooting. When you are
done testing the security appliance, follow the steps in
page
This section includes the following topics:
•
•
•
•

Enabling ICMP Debug Messages and System Log Messages

Debug messages and system log messages can help you troubleshoot why your pings are not successful.
The security appliance only shows ICMP debug messages for pings to the security appliance interfaces,
and not for pings through the security appliance to other hosts. To enable debugging and system log
messages, perform the following steps:
OL-12172-03
Testing Your Configuration, page 43-1
Reloading the Security Appliance, page 43-6
Performing Password Recovery, page 43-6
Using the ROM Monitor to Load a Software Image, page 43-10
Erasing the Flash File System, page 43-12
Other Troubleshooting Tools, page 43-12
Common Problems, page 43-13
43-5.
Enabling ICMP Debug Messages and System Log Messages, page 43-1
Pinging Security Appliance Interfaces, page 43-2
Pinging Through the Security Appliance, page 43-4
Disabling the Test Configuration, page 43-5
C H A P T E R
"Disabling the Test Configuration" section on
Cisco Security Appliance Command Line Configuration Guide
43
43-1