icmp translation

Unanswered Question
Jul 29th, 2009

i am getting the following error in my syslogs:

regular translation creation failed for icmp src inside:x.x.x.x dst outside:x.x.x.x (type 3, code 3)

although everything appears to be working fine. any thoughts?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tstanik Tue, 08/04/2009 - 15:07

This message can be either an internal error or an error in the configuration.

%PIX-3-305006: Regular translation creation failed for protocol src int_name:IP_addr/port dst int_name:IP_addr/port

A protocol (UDP, TCP, or ICMP) failed to create a translation through the PIX Firewall. This message appears as a fix to caveat CSCdr0063 that requested that PIX Firewall not allow packets destined to network or broadcast addresses. PIX Firewall provides this checking for addresses that are explicitly identified with static command statements. With the change, for inbound traffic, PIX Firewall denies translations for a destined IP address identified as a network or broadcast address.

suschoud Tue, 08/04/2009 - 15:20

do u have translation defined from traffic from inside to outside ,

nat (inside) 1 0 0

glo (outside) 1 interface

bmarms Wed, 08/05/2009 - 03:44


nat (inside) 1

global (outside) 1 interface


This Discussion