17-4
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 17 Monitoring and Troubleshooting the Firewall Services Module
Troubleshooting the Firewall Services Module
Troubleshooting the Firewall Services Module
This section describes how troubleshoot the FWSM, and includes the following topics:
• Testing Your Configuration, page 17-4
• Reloading the Firewall Services Module, page 17-8
• Troubleshooting Passwords and AAA, page 17-9
• Other Troubleshooting Tools, page 17-10
• Common Problems, page 17-11
Testing Your Configuration
This section describes how to test connectivity for the single mode FWSM or for each security context.
The following steps describe how to ping the FWSM interfaces, and how to allow hosts on one interface
to ping through to hosts on another interface.
We recommend that you only enable pinging and debug messages during troubleshooting. When you are
done testing the FWSM, follow the steps in the “Disabling the Test Configuration” section on page 17-8.
This section includes:
• Enabling ICMP Debug Messages and System Messages, page 17-4
• Pinging FWSM Interfaces, page 17-5
• Pinging Through the FWSM, page 17-7
• Disabling the Test Configuration, page 17-8
Enabling ICMP Debug Messages and System Messages
Debug messages and system messages can help you troubleshoot why your pings are not successful. The
FWSM only shows ICMP debug messages for pings to the FWSM interfaces, and not for pings through
the FWSM to other hosts. To enable debugging and system messages, follow these steps:
Step 1 To show ICMP packet information for pings to the FWSM interfaces, enter the following command:
FWSM/contexta(config)# debug icmp trace
Step 2 To set system messages to be sent to Telnet or SSH sessions, enter the following command:
FWSM/contexta(config)# logging monitor debug
You can alternately use logging buffer debug to send messages to a buffer, and then view them later
using the show logging command.
Step 3 To send the system messages to your Telnet or SSH session, enter the following command:
FWSM/contexta(config)# terminal monitor
Step 4 To enable system messages, enter the following command:
FWSM/contexta(config)# logging on
To Next Page
Loading...
Need help?
General