cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1732
Views
0
Helpful
3
Replies

administratively prohibited

wgranada1
Level 1
Level 1

Hi has anyone see this before? I have a bgp route of 10.254.27.0 I'm trying to reach it from a local ip address of 10.255.180.11. I have pemissioned the subnet 10.255.180.0/25 to be allowed to get to the 10.254.27.0/24 but when I run a debug on the router I see the following message:

Mar 23 13:45:26.107 UTC: ICMP: dst (10.254.27.51) administratively prohibited unreachable sent to 10.255.180.11

what is causing this? I've checked all my access-list and 10.255.180.0 subnet is permissioned on all of them? What am I missing?

3 Replies 3

rais
Level 7
Level 7

The other side may not have permission to send echo-replies back to you.

Thanks.

dmitrysherman
Level 1
Level 1

Seems like you're receiving ICMP type 3 code 9 message (http://conft.org/icmp-parameters).

This message comes from the end point or a device in the middle that filters your requests.

Thank guys for the info I will check the device in the middle with goes through our coporate network

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco