08-21-2008 04:30 AM - edited 03-11-2019 06:34 AM
I'm using IP SLA Monitor with a default ICMP Jitter operation to an ASA interface, but the firewall does not respond.
How can I enable a reply to a timestamp request message?
Thanks.
08-21-2008 04:55 AM
Hi
If the interface (say interface1)on which you want to reply a time stamp request message sent by a host (say host1) you must use this global configuration command:
icmp permit host host1 timestamp-reply interface1
I hope this helps.
Best regards.
Massimiliano.
08-21-2008 05:22 AM
Hello Massimiliano.
The ICMP command does not work.
I'm using ASA with software version 8.0.3.
Thanks.
Andrea.
08-21-2008 05:36 AM
Hi,
Did you enabled logging...
What do you see?
Try with icmp permit ip_address_host1 subnet_mask_host1 timestamp-reply interface1
Massimiliano.
08-21-2008 06:59 AM
Yes, built and teardown.
08-21-2008 05:42 AM
Why not?
http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i1.html#wp1685750
icmp permit ip_address net_mask timestamp-request outside
Regards
Farrukh
08-21-2008 06:58 AM
Why not?
Good question!
The operation fails with a timeout message: IP SLAs(9) icmpjitter operation: Timeout.
Regards.
Andrea.
08-21-2008 07:03 AM
IP SLA configuration.
ip sla 9
icmp-jitter 1.1.1.1 source 1.1.1.2
history statistics-distribution-interval 20
ip sla schedule 9 life forever start-time now ageout 3600
where 1.1.1.1 is the IP of ASA, inside interface.
No responses come from ASA.
08-21-2008 08:26 AM
Did you enable the command I sent you earlier?
In fact for testing just do this:
icmp permit any inside
Regards
Farrukh
08-21-2008 08:21 AM
The 'Why not' was for the icmp command support on the ASA :)
Not for why the jitter is timing out.
Regards
Farrukh
08-21-2008 08:51 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: