cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
492
Views
19
Helpful
7
Replies

CSS interface sending ICMP to PIX

wilson_1234_2
Level 3
Level 3

I have a css in one armed config. My PIX interface is getting ICMP from the CSS interface, not a service address, but the CSS interface.

The PIX is denying the requests, but I do not see where it is coming from.

They are coming more frequent that the TACACS frequency setting.

I did have some services configured with ICMP keepalives, but they are suspended.

Anyone have any ideas?

7 Replies 7

Diego Vargas
Cisco Employee
Cisco Employee

Hi, the CSS will send a ICMP keepalive by default to its upstream device. In order to disable this, run the command:

CSS(config)# ip no-implicit-service

Hope it helps!!

just one remark to the info that was given here, the command 'ip no-implicit-service' only applies to newly configured routes.

Once you configured this command, you need to either reboot the CSS or remove and reconfigure the static routes.

Gilles.

Can you tell me why these keepalives are sent?

this is au automatic keepalive to detect if the next-hop is available.

If it goes down, the CSS will not use the route and try another one.

Gilles.

Thanks,

Can you set the frequency or number of packets that are sent?

no, there is no option to configure the automatic keepalive.

All you can do is turn it off.

Gilles.

thanks.

No thought on the SMTP post?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: