Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA. How to enable ICMP timestamp.

I'm using IP SLA Monitor with a default ICMP Jitter operation to an ASA interface, but the firewall does not respond.

How can I enable a reply to a timestamp request message?

Thanks.

10 REPLIES

Re: ASA. How to enable ICMP timestamp.

Hi

If the interface (say interface1)on which you want to reply a time stamp request message sent by a host (say host1) you must use this global configuration command:

icmp permit host host1 timestamp-reply interface1

I hope this helps.

Best regards.

Massimiliano.

New Member

Re: ASA. How to enable ICMP timestamp.

Hello Massimiliano.

The ICMP command does not work.

I'm using ASA with software version 8.0.3.

Thanks.

Andrea.

Re: ASA. How to enable ICMP timestamp.

Hi,

Did you enabled logging...

What do you see?

Try with icmp permit ip_address_host1 subnet_mask_host1 timestamp-reply interface1

Massimiliano.

New Member

Re: ASA. How to enable ICMP timestamp.

Yes, built and teardown.

Re: ASA. How to enable ICMP timestamp.

Why not?

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i1.html#wp1685750

icmp permit ip_address net_mask timestamp-request outside

Regards

Farrukh

New Member

Re: ASA. How to enable ICMP timestamp.

Why not?

Good question!

The operation fails with a timeout message: IP SLAs(9) icmpjitter operation: Timeout.

Regards.

Andrea.

New Member

Re: ASA. How to enable ICMP timestamp.

IP SLA configuration.

ip sla 9

icmp-jitter 1.1.1.1 source 1.1.1.2

history statistics-distribution-interval 20

ip sla schedule 9 life forever start-time now ageout 3600

where 1.1.1.1 is the IP of ASA, inside interface.

No responses come from ASA.

Re: ASA. How to enable ICMP timestamp.

Did you enable the command I sent you earlier?

In fact for testing just do this:

icmp permit any inside

Regards

Farrukh

Re: ASA. How to enable ICMP timestamp.

The 'Why not' was for the icmp command support on the ASA :)

Not for why the jitter is timing out.

Regards

Farrukh

New Member

Re: ASA. How to enable ICMP timestamp.

Hi Farrukh and many thanks for your help.

Please, see attached zip for simple network layout with a PIX and configuration files.

Regards.

Andrea.

778
Views
0
Helpful
10
Replies
CreatePlease login to create content