PIX configuration: enable ICMP type 3 code 4 from outside

I'm a newbie to CISCO PIX firewalls. My problems is to allow ICMP packages of type 3 code 4 (defragmentation needed) from a specific DSL router to the internal network interface. The following line should allow ICMP type 3 packages - does this allow all subtypes or maybe  just code 0 or 1?

PIX1#icmp permit host 192.168.1.3 unreachable outside

How can I specify the type a little bit more specific? Thanks for any help.

Kind regards,
Marc
mw-solutionsAsked:
Who is Participating?
 
gpriceeeCommented:
"to allow ICMP packages of type 3 code 4 (defragmentation needed)"
icmp permit xxxxxxxxxxx unreachable is type 3 and all subtypes

"from a specific DSL router to the internal network interface"
icmp permit xxxxxxxxxxxxxxxxxxxx outside does NOT permit the packets to the inside interface

"How can I specify the type a little bit more specific"
You have specified the type; there is no command for the sub-type.

icmp permit host 192.168.1.3 unreachable inside

The issue I see with this--unless you're using this to maintain a vpn--is that hopefully you've simply replaces the ip address of the DSL router with the non-routable 192.168.1.3.  If not, you need to replace the 192.168.1.3 with the public address of the DSL router: the external interface address.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.