ACE traceroute problem

Unanswered Question
Jan 17th, 2008

Traceroute does not work when initiated from a server behind the ACE module. The output shows only the destination ip.

The ACE is in routed mode.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
sadbulali Wed, 01/23/2008 - 09:15

Traceroute is a widely available utility on most operating systems today. Much like ping, it is a valuable tool for determining connectivity in a network. Ping allows the user to find out if there is a connection between two end systems. Traceroute does this as well, but it additionally lists the intermediate routers between the two systems. Users can therefore see the routes that packets can take from the Content Engine to another system. Use the traceroute EXEC command to find the route to a remote host, when either the host name or IP address is known.

todd.underwood Wed, 04/07/2010 - 09:04

I know this is old, however I found this thread while having a similar issue, which was resolved by icmp error fixup:

access-list ICMP_ACL line 10 extended permit icmp any any

class-map match-all ICMP_INSPECT_CLASS
  2 match access-list ICMP_ACL

policy-map multi-match ICMP_INSPECT_POLICY
  class ICMP_INSPECT_CLASS
    inspect icmp error

interface vlan xxx (client side)
  service-policy input ICMP_INSPECT_POLICY

Actions

This Discussion