08-16-2007 08:48 AM
I have a css in one armed config. My PIX interface is getting ICMP from the CSS interface, not a service address, but the CSS interface.
The PIX is denying the requests, but I do not see where it is coming from.
They are coming more frequent that the TACACS frequency setting.
I did have some services configured with ICMP keepalives, but they are suspended.
Anyone have any ideas?
08-16-2007 09:05 AM
Hi, the CSS will send a ICMP keepalive by default to its upstream device. In order to disable this, run the command:
CSS(config)# ip no-implicit-service
Hope it helps!!
08-16-2007 09:33 AM
just one remark to the info that was given here, the command 'ip no-implicit-service' only applies to newly configured routes.
Once you configured this command, you need to either reboot the CSS or remove and reconfigure the static routes.
Gilles.
08-16-2007 11:30 AM
Can you tell me why these keepalives are sent?
08-16-2007 12:00 PM
this is au automatic keepalive to detect if the next-hop is available.
If it goes down, the CSS will not use the route and try another one.
Gilles.
08-16-2007 02:31 PM
Thanks,
Can you set the frequency or number of packets that are sent?
08-16-2007 10:23 PM
no, there is no option to configure the automatic keepalive.
All you can do is turn it off.
Gilles.
08-17-2007 03:12 AM
thanks.
No thought on the SMTP post?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: