Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

CSS interface sending ICMP to PIX

I have a css in one armed config. My PIX interface is getting ICMP from the CSS interface, not a service address, but the CSS interface.

The PIX is denying the requests, but I do not see where it is coming from.

They are coming more frequent that the TACACS frequency setting.

I did have some services configured with ICMP keepalives, but they are suspended.

Anyone have any ideas?

7 REPLIES
Cisco Employee

Re: CSS interface sending ICMP to PIX

Hi, the CSS will send a ICMP keepalive by default to its upstream device. In order to disable this, run the command:

CSS(config)# ip no-implicit-service

Hope it helps!!

Cisco Employee

Re: CSS interface sending ICMP to PIX

just one remark to the info that was given here, the command 'ip no-implicit-service' only applies to newly configured routes.

Once you configured this command, you need to either reboot the CSS or remove and reconfigure the static routes.

Gilles.

New Member

Re: CSS interface sending ICMP to PIX

Can you tell me why these keepalives are sent?

Cisco Employee

Re: CSS interface sending ICMP to PIX

this is au automatic keepalive to detect if the next-hop is available.

If it goes down, the CSS will not use the route and try another one.

Gilles.

New Member

Re: CSS interface sending ICMP to PIX

Thanks,

Can you set the frequency or number of packets that are sent?

Cisco Employee

Re: CSS interface sending ICMP to PIX

no, there is no option to configure the automatic keepalive.

All you can do is turn it off.

Gilles.

New Member

Re: CSS interface sending ICMP to PIX

thanks.

No thought on the SMTP post?

147
Views
19
Helpful
7
Replies
CreatePlease to create content