Thanks for quick response.

I'm trying to check ICMP traffic by checking config & not seeing any command configured for icmp traffic.

as per my knowledge ICMP traffic is routed through the security appliance comes under security issue not routing issue.

Please correct me if I'm wrong.

Thanks

Oh, so you are talking about firewall configs & icmp response to the firewall. By default its denied, but when you permit any ip traffic to the destination then icmp gets thru the firewall.

you may revert for further clarification.

pls rate all helpful posts.

I'm taking care of request saying that its having ICMP lost connetivity to specific device.

1..As it is assigned to me (network group) I think it may be having some routing issue..so i think you first response is somewhat help to troubleshoot routing problem if have any.

2. I searched on cisco site & it mentioning that its related to access-list, security area. I'm not very sure about it.

3. In such a situation how shoul I proceed to fix problem?? I think traceroute is fine to check where is fault, but ping is successful then I dont think traceroute come in picture.

Please clarify

I'm taking care of request saying that its having ICMP lost connetivity to specific device.

1..As it is assigned to me (network group) I think it may be having some routing issue..so i think you first response is somewhat help to troubleshoot routing problem if have any.

2. I searched on cisco site & it mentioning that its related to access-list, security area. I'm not very sure about it.

3. In such a situation how shoul I proceed to fix problem?? I think traceroute is fine to check where is fault, but ping is successful then I dont think traceroute come in picture.

Please clarify

bhartiji, first ensure that the node you are trying to ping is UP on network. One way of doing it is to ping it from the nearest switch such that firewall doesnt come in to picture.

Then find out with security team what tcp port is open on firewall for this server. Try telnet to the server on this port(telnet x.x.x.x portnumber) from local network where the server is. Ensure firewall doesnt come in to picture.

if it gives a blank screen, then application is UP on server.

These 2 tests ensure that your sever & application are both working.

Now repeat the tests from behind the firewall. Trace should reach up to the nearest hop to firewall. Then the issue is with firewall config.

But if trace doesnt reach till firewall or hop before that, then check routing till destination.

pls rate all helpful posts.

Thanks Dave.