Solved

tracert being blocked asa 5505

Posted on 2008-10-09
3
1,648 Views
Last Modified: 2008-10-09
hi i get a request timed out when i try tracert under my cisco asa 5505,
here is the log that appears when i try the trace route

Deny icmp src outside:IPdst inside:MY IP(type 11, code 0) by access-group "outside_access_in" [0x0, 0x0]
0
Comment
Question by:Dan560
  • 2
3 Comments
 
LVL 4

Expert Comment

by:TNL_Engr
ID: 22681578
Have you tried enabling ICMP on the outside interface?
From the CLI, it looks like this:
icmp permit any Outside
0
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 22681593
Add this:

conf t
access-list outside_access_in extended permit icmp any any echo-reply
access-list outside_access_in extended permit icmp any any time-exceeded
access-list outside_access_in extended permit icmp any any unreachable
0
 
LVL 4

Expert Comment

by:TNL_Engr
ID: 22681598
Sorry, I forgot to add:  If you are using the GUI (ASDM), this is found under:
Configuration: Device Management: ICMP
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now