cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
619
Views
0
Helpful
4
Replies

Allowing TRACEROUTE through PIX

corey.mckinney
Level 1
Level 1

What is required to allow a traceroute to go through the PIX firewall? I believe I have it setup correctly, but I'm still unable to trace through. It just times out when it gets to the firewall. Thanks.

4 Replies 4

cewhitnel
Level 1
Level 1

Use this ACL applied to your outside interface.

access-list "ACLNAME" permit icmp any any time-exceeded

How do I apply that ACL to the interface? I can't find the command.

access-group "access list name" in interface outside

Just add the following to your outside interface:

access-list permit icmp any any echo-reply

access-list permit icmp any any unreachable

access-list permit icmp any any time-exceeded

access-group in interface outside

** can be anything you want for the outside interface**

save with write mem and also issue claer xlate

pls rate posts if it helps.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card