11-06-2011 02:47 PM - edited 03-11-2019 02:46 PM
Hi,
Is it possible to debug a ASA config?
For example, when you write a program in Java you can debug (add break points) at each command to see where the config is incorrect, is there such a way to do this on a ASA?
11-06-2011 04:09 PM
John Peterson wrote:
Hi,
Is it possible to debug a ASA config?
For example, when you write a program in Java you can debug (add break points) at each command to see where the config is incorrect, is there such a way to do this on a ASA?
Not that I know of.
However, when you're entering a config via the CLI, the system will tell you if you use incorrect syntax, or have a glaringly obvious error.
It's enough to work through probably 70% of config issues.
Someone might know an off-line configuration parser, but I've never seen one.
Cheers
11-06-2011 10:31 PM
Ok, thanks.
Would you know in which order the command are excuteded .i.e. ACL,NAT,VPN etc...
11-07-2011 02:59 AM
Hi,
Depends on the direction of traffic
If inside to outside then acl and then nat
Keeping above with VPN tunnel then inside acl , nat and then VPN acl
HTH
Sent from Cisco Technical Support iPad App
11-07-2011 06:19 AM
Is there anything else which is between "inside to outside then acl and then nat" ?
Does the VPN commands get excuteded just before the packet goes out the outside interface?
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide