cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1746
Views
0
Helpful
10
Replies

ASA. How to enable ICMP timestamp.

andrea.meconi
Level 2
Level 2

I'm using IP SLA Monitor with a default ICMP Jitter operation to an ASA interface, but the firewall does not respond.

How can I enable a reply to a timestamp request message?

Thanks.

10 Replies 10

Hi

If the interface (say interface1)on which you want to reply a time stamp request message sent by a host (say host1) you must use this global configuration command:

icmp permit host host1 timestamp-reply interface1

I hope this helps.

Best regards.

Massimiliano.

Hello Massimiliano.

The ICMP command does not work.

I'm using ASA with software version 8.0.3.

Thanks.

Andrea.

Hi,

Did you enabled logging...

What do you see?

Try with icmp permit ip_address_host1 subnet_mask_host1 timestamp-reply interface1

Massimiliano.

Yes, built and teardown.

Why not?

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i1.html#wp1685750

icmp permit ip_address net_mask timestamp-request outside

Regards

Farrukh

Why not?

Good question!

The operation fails with a timeout message: IP SLAs(9) icmpjitter operation: Timeout.

Regards.

Andrea.

IP SLA configuration.

ip sla 9

icmp-jitter 1.1.1.1 source 1.1.1.2

history statistics-distribution-interval 20

ip sla schedule 9 life forever start-time now ageout 3600

where 1.1.1.1 is the IP of ASA, inside interface.

No responses come from ASA.

Did you enable the command I sent you earlier?

In fact for testing just do this:

icmp permit any inside

Regards

Farrukh

The 'Why not' was for the icmp command support on the ASA :)

Not for why the jitter is timing out.

Regards

Farrukh

Hi Farrukh and many thanks for your help.

Please, see attached zip for simple network layout with a PIX and configuration files.

Regards.

Andrea.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: