Solved

regular translation creation failed for icmp src inside

Posted on 2009-05-14
2
2,613 Views
Last Modified: 2012-06-22
Hi Experts
Ive been getting these errors on my ASA "regular translation creation failed for icmp src inside"
according to Cisco documentation this error can be caused if a device is sending ICMP packets other than echo or echo-reply the ASA drops such packets and produces this error. But the source ip is always a public ip eg.96.17.166.181 my src inside:172.17.2.10 is my core switch and the destination is allways a public ip. Here is the error.....305006  (source ip) 96.17.166.181  regular translation creation failed for icmp src inside:172.17.2.6 dst outside:96.17.166.181 (type 11, code 0). Any Help is greatly appreciated as allways
0
Comment
Question by:brucehunter
2 Comments
 
LVL 15

Accepted Solution

by:
Voltz-dk earned 250 total points
ID: 24391098
ICMP type 11 is time-exceeded, which is usually sent in response to trace-route.  So I guess the 96.17.166.181 is doing some traceroute into your network, and eventually your core switch is replying to that.  Then I guess you don't have a translation for that.  

Now you say core switch is .10 though, while log entry is .6 - I don't know which device is what, but still it's likely a traceroute.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By this time the large percentage of day-to-day transactions have shifted to mobile banking; here are some overriding areas QAs must investigate while testing mobile banking apps.  
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now