Trace command in PIX v7.0

acharyr123 · ‎02-10-2008

Hi,

By default trace/traceroute can't be executed in pix/asa. But i believe it can be enabled.

Can someone suggest me with the sample config of the same!!

The running iOS version is 7.0

JORGE RODRIGUEZ · ‎02-10-2008

Partha,

Try one of these two methods.

1-

access-list 101 permit icmp any any echo-reply

access-list 101 permit icmp any any source-quench

access-list 101 permit icmp any any unreachable

access-list 101 permit icmp any any time-exceeded

access-group 101 in interface outside

or

2-

policy-map global_policy

class inspection_default

inspect icmp

Check this link for more details on PIX/ASA ICMP and traceroutes handling.

Rgds

Jorge

Jorge Rodriguez