Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Pings (ICMP) to the PIX/ASA interface stop for a period of time
This issue is documented in Cisco bug ID CSCsb99792.
An Internet Control Message Protocol (ICMP) packet must egress the interface that is used as a global Port Address Translation (PAT) address for dynamic translation being PATed to the interface IP and must be assigned an internal connection source port of zero. It can be seen in the output of the show xlate command, as shown:
PAT Global 10.36.9.2(0) Local 172.16.5.21 ICMP id 512.
The source port in the global address should be zero.
For a workaround, either use any other IP address apart from the interface IP address as the global PAT address.
Clear the specific ICMP translation that causes the problem. For example: