Performance issue after allowed ICMP in traffic rule

blaxucisco · ‎08-18-2010

Hi All,

Today I am facing new problem in NAC environment. as per the cisco documents, I allowed all mentioned ports, fragments and ICMP to the DCs. but after enable the ICMP desktop pc is hanging on "applying computer settings" stage. If I disable ICMP rule we don't have this issue.

if anyone have any idea regarding this issue pleas share me.

here is the config

Priority	8
Action	Allow Block
State	Enabled Disabled
Category
Protocol
Type
Untrusted (IP/Mask :Port )	/ : (ex: "*", "21,1024-1100", "1024-65535")
Trusted (IP/Mask :Port )	/ : (ex: "*", "21,1024-1100", "1024-65535")
Description

Thank you

Laxman

Faisal Sehbai · ‎08-20-2010

Laxman,

This rule you pasted is allowing all traffic. Were you having issues even after opening up all traffic to DCs?

Faisal

blaxucisco · ‎08-22-2010

Faisal,

sorry for wrong snap-shot, here is the exact snapshot of my config.

Thank you

Laxman