08-16-2007 08:48 AM
I have a css in one armed config. My PIX interface is getting ICMP from the CSS interface, not a service address, but the CSS interface.
The PIX is denying the requests, but I do not see where it is coming from.
They are coming more frequent that the TACACS frequency setting.
I did have some services configured with ICMP keepalives, but they are suspended.
Anyone have any ideas?
08-16-2007 09:05 AM
Hi, the CSS will send a ICMP keepalive by default to its upstream device. In order to disable this, run the command:
CSS(config)# ip no-implicit-service
Hope it helps!!
08-16-2007 09:33 AM
just one remark to the info that was given here, the command 'ip no-implicit-service' only applies to newly configured routes.
Once you configured this command, you need to either reboot the CSS or remove and reconfigure the static routes.
Gilles.
08-16-2007 11:30 AM
Can you tell me why these keepalives are sent?
08-16-2007 12:00 PM
this is au automatic keepalive to detect if the next-hop is available.
If it goes down, the CSS will not use the route and try another one.
Gilles.
08-16-2007 02:31 PM
Thanks,
Can you set the frequency or number of packets that are sent?
08-16-2007 10:23 PM
no, there is no option to configure the automatic keepalive.
All you can do is turn it off.
Gilles.
08-17-2007 03:12 AM
thanks.
No thought on the SMTP post?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide