Solved

regular translation creation failed for icmp src inside

Posted on 2009-05-14
2
2,761 Views
Last Modified: 2012-06-22
Hi Experts
Ive been getting these errors on my ASA "regular translation creation failed for icmp src inside"
according to Cisco documentation this error can be caused if a device is sending ICMP packets other than echo or echo-reply the ASA drops such packets and produces this error. But the source ip is always a public ip eg.96.17.166.181 my src inside:172.17.2.10 is my core switch and the destination is allways a public ip. Here is the error.....305006  (source ip) 96.17.166.181  regular translation creation failed for icmp src inside:172.17.2.6 dst outside:96.17.166.181 (type 11, code 0). Any Help is greatly appreciated as allways
0
Comment
Question by:brucehunter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 15

Accepted Solution

by:
Voltz-dk earned 250 total points
ID: 24391098
ICMP type 11 is time-exceeded, which is usually sent in response to trace-route.  So I guess the 96.17.166.181 is doing some traceroute into your network, and eventually your core switch is replying to that.  Then I guess you don't have a translation for that.  

Now you say core switch is .10 though, while log entry is .6 - I don't know which device is what, but still it's likely a traceroute.
0

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
exchange 2010 Dag failed 3 67
Cisco WLC certificate question 4 14
port-forwarding asa 9.5 9 28
Exchange 2010 certificate warning. 5 36
Many old projects have bad code, but the budget doesn't exist to rewrite the codebase. You can update this code to be safer by introducing contemporary input validation, sanitation, and safer database queries.
Smart phones, smart watches, Bluetooth-connected devices—the IoT is all around us. In this article, we take a look at the security implications of our highly connected world.
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question