Cisco PIX 525 Spezifikationen PDF herunterladen (Seite 520)

100

101

32-12

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 32 Monitoring and Troubleshooting

Troubleshooting the Security Appliance

Viewing the Crash Dump

If the security appliance crashes, you can view the crash dump information. We recommend contacting

Cisco TAC if you want to interpret the crash dump. See the show crashdump command in the

Cisco Security Appliance Command Reference.

Common Problems

This section describes common problems with the security appliance, and how you might resolve them.

Symptom The context configuration was not saved, and was lost when you reloaded.

Possible Cause You did not save each context within the context execution space. If you are

configuring contexts at the command line, you did not save the context before you changed to the

next context.

Recommended Action Save each context within the context execution space using the copy run start

command. You cannot save contexts from the system execution space.

Symptom You cannot make a Telnet connection or SSH to the security appliance interface.

Possible Cause You did not enable Telnet or SSH to the security appliance.

Recommended Action Enable Telnet or SSH to the security appliance according to the “Allowing

Telnet Access” section on page 30-1 or the “Allowing SSH Access” section on page 30-2.

Symptom You cannot ping the security appliance interface.

Possible Cause You disabled ICMP to the security appliance.

Recommended Action Enable ICMP to the security appliance for your IP address using the icmp

command.

Symptom You cannot ping through the security appliance, even though the access list allows it.

Possible Cause You did not enable the ICMP inspection engine or apply access lists on both the

ingress and egress interfaces.

Recommended Action Because ICMP is a connectionless protocol, the security appliance does not

automatically allow returning traffic through. In addition to an access list on the ingress interface,

you either need to apply an access list to egress interface to allow replying traffic, or enable the

ICMP inspection engine, which treats ICMP connections as stateful connections.

1 2 ... 515 516 517 518 519 520 521 522 523 524 525 ... 603 604

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco PIX 525 Spezifikationen Seite 520

Kommentare zu diesen Handbüchern