Solved

Enable ping and tracert through sonicwall

Posted on 2009-05-13
6
4,854 Views
Last Modified: 2013-11-29
I would like to know what rules I need to create to allow a tracert through a sonicwall tz170.
There is a default service for ping but not for tracert.
0
Comment
Question by:kallatech
  • 3
  • 3
6 Comments
 
LVL 2

Expert Comment

by:JMorganRead
ID: 24377910
You have to allow outgoing UDP messages to ports 33434 through 33534 as well as allow outgoing ICMP echo requests.  I'm not sure what the exact syntax is for your sonicwall, but that's the gist of what you need to do.  That will let Windows and *nix tracerts through the firewall.  Hope this helps :)
0
 

Author Comment

by:kallatech
ID: 24378680
There is a service in the sonicwall called echo is that what you are talking about?
I created a service using udp and put in the port range you suggested.
I then did the astrerik to asterik allow when setting up the rule.
Are you saying I also need to do this for icmp and the echo service?
0
 
LVL 2

Accepted Solution

by:
JMorganRead earned 125 total points
ID: 24381229
Right.  We don't have the exact setup - - I have a different model of SonicWall, but you need to set up an access rule which allows incoming or outgoing (as appropriate to which way you want to trace) echo service on ports 33434 to 33534.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:kallatech
ID: 24383717
I also created a rule that allows any service in and any service out would that not do that same thing or does the sonicwall require a specfic rule?

Here is my understand of what you are telling me I create a rule using the echo service that runs on the port range you gave me using icmp and that should allow tracert in and out?
0
 

Author Comment

by:kallatech
ID: 24383761
I created a rule that uses the echo service and did the asterisk to asterik allow.
I also created a rule that allows icmp 1 through the port range you gave me with the asterisk to asterik allow.

Is this all I need?
0
 
LVL 2

Expert Comment

by:JMorganRead
ID: 24386550
Yes, should be.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Please see preceding article here: http://www.experts-exchange.com/Networking/Operating_Systems/A_11209-Root-Bridge-Election.html Figure 1 After Root Bridge has been elected, then what?..... Let's start by defining a Root Port in la…
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

816 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now