Solved

tracert being blocked asa 5505

Posted on 2008-10-09
3
1,672 Views
Last Modified: 2008-10-09
hi i get a request timed out when i try tracert under my cisco asa 5505,
here is the log that appears when i try the trace route

Deny icmp src outside:IPdst inside:MY IP(type 11, code 0) by access-group "outside_access_in" [0x0, 0x0]
0
Comment
Question by:Dan560
  • 2
3 Comments
 
LVL 4

Expert Comment

by:TNL_Engr
ID: 22681578
Have you tried enabling ICMP on the outside interface?
From the CLI, it looks like this:
icmp permit any Outside
0
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 22681593
Add this:

conf t
access-list outside_access_in extended permit icmp any any echo-reply
access-list outside_access_in extended permit icmp any any time-exceeded
access-list outside_access_in extended permit icmp any any unreachable
0
 
LVL 4

Expert Comment

by:TNL_Engr
ID: 22681598
Sorry, I forgot to add:  If you are using the GUI (ASDM), this is found under:
Configuration: Device Management: ICMP
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question