topic How do I Debug the config - add break points in Network Security

How do I Debug the config - add break points

John Peterson — Mon, 11 Mar 2019 21:46:47 GMT

Hi,

Is it possible to debug a ASA config?

For example, when you write a program in Java you can debug (add break points) at each command to see where the config is incorrect, is there such a way to do this on a ASA?

How do I Debug the config - add break points

darren.g — Mon, 07 Nov 2011 00:09:18 GMT

John Peterson wrote:

Hi,

Is it possible to debug a ASA config?

For example, when you write a program in Java you can debug (add break points) at each command to see where the config is incorrect, is there such a way to do this on a ASA?

Not that I know of.

However, when you're entering a config via the CLI, the system will tell you if you use incorrect syntax, or have a glaringly obvious error.

It's enough to work through probably 70% of config issues.

Someone might know an off-line configuration parser, but I've never seen one.

Cheers

How do I Debug the config - add break points

John Peterson — Mon, 07 Nov 2011 06:31:03 GMT

Ok, thanks.

Would you know in which order the command are excuteded .i.e. ACL,NAT,VPN etc...

Re: How do I Debug the config - add break points

zulqurnain — Mon, 07 Nov 2011 10:59:02 GMT

Hi,

Depends on the direction of traffic

If inside to outside then acl and then nat

Keeping above with VPN tunnel then inside acl , nat and then VPN acl

HTH

Sent from Cisco Technical Support iPad App

How do I Debug the config - add break points

John Peterson — Mon, 07 Nov 2011 14:19:59 GMT

Is there anything else which is between "inside to outside then acl and then nat" ?

Does the VPN commands get excuteded just before the packet goes out the outside interface?

Thanks