traceroute through firewalls

carl_townshend · ‎09-11-2008

Hi all, can anyone tell me why when I traceroute through my firewall, I cannot see the ip, what do i need to enable on my asa so you can see it as a hop ?

singhsaju · ‎09-11-2008

Hi Carl,

By default firewall interface does not respond to ping,traceroute(icmp pkts) being security device . However, you can configure its interfaces to respond to icmp .

enable following commands:

icmp permit any outside

icmp permit any inside

HTH

Saju

Pls rate helpful posts

carl_townshend · ‎09-11-2008

is that part of an access list or seperate commands? and why do you need to do it on the inside , does the inside not respond to ping by default, i can normally ping the inside by default

singhsaju · ‎09-11-2008

no they are just commands . Just input those commands when you are in config mode.

check your config , maybe its already enabled for inside interface.