Chapter 26 Troubleshooting The Firewall Services Module; Testing Your Configuration; Enabling Icmp Debug Messages And System Log Messages - Cisco 7604 Configuration Manual

Troubleshooting the Firewall Services Module
This chapter describes how to troubleshoot the FWSM, and includes the following sections:
•
•
•
•
•

Testing Your Configuration

This section describes how to test connectivity for the single mode FWSM or for each security context.
The following steps describe how to ping the FWSM interfaces, and how to allow hosts on one interface
to ping through to hosts on another interface.
We recommend that you only enable pinging and debug messages during troubleshooting. When you are
done testing the FWSM, follow the steps in the
This section includes:
•
•
•
•

Enabling ICMP Debug Messages and System Log Messages

Debug messages and system log messages can help you troubleshoot why your pings are not successful.
The FWSM only shows ICMP debug messages for pings to the FWSM interfaces, and not for pings
through the FWSM to other hosts. To enable debugging and system log messages, perform the following
steps:
To show ICMP packet information for pings to the FWSM interfaces, enter the following command:
Step 1
hostname(config)# debug icmp trace
To set system log messages to be sent to Telnet or SSH sessions, enter the following command:
Step 2
hostname(config)# logging monitor debug
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Testing Your Configuration, page 26-1
Reloading the FWSM, page 26-6
Performing Password Recovery, page 26-6
Other Troubleshooting Tools, page 26-7
Common Problems, page 26-10
Enabling ICMP Debug Messages and System Log Messages, page 26-1
Pinging FWSM Interfaces, page 26-2
Pinging Through the FWSM, page 26-4
Disabling the Test Configuration, page 26-5
C H A P T E R
"Disabling the Test Configuration" section on page
26
26-5.
26-1