PIX configuration: enable ICMP type 3 code 4 from outside

Posted on 2005-04-06
Last Modified: 2013-11-29
I'm a newbie to CISCO PIX firewalls. My problems is to allow ICMP packages of type 3 code 4 (defragmentation needed) from a specific DSL router to the internal network interface. The following line should allow ICMP type 3 packages - does this allow all subtypes or maybe  just code 0 or 1?

PIX1#icmp permit host unreachable outside

How can I specify the type a little bit more specific? Thanks for any help.

Kind regards,
Question by:mw-solutions
    1 Comment
    LVL 13

    Accepted Solution

    "to allow ICMP packages of type 3 code 4 (defragmentation needed)"
    icmp permit xxxxxxxxxxx unreachable is type 3 and all subtypes

    "from a specific DSL router to the internal network interface"
    icmp permit xxxxxxxxxxxxxxxxxxxx outside does NOT permit the packets to the inside interface

    "How can I specify the type a little bit more specific"
    You have specified the type; there is no command for the sub-type.

    icmp permit host unreachable inside

    The issue I see with this--unless you're using this to maintain a vpn--is that hopefully you've simply replaces the ip address of the DSL router with the non-routable  If not, you need to replace the with the public address of the DSL router: the external interface address.

    Featured Post

    Live: Real-Time Solutions, Start Here

    Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

    Join & Write a Comment

    This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
    Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now