Whenever i do a traceroute using pingplotter (uses icmp not udp), i get replies from all devices in the path but not from the ASA and our perimeter router. I understand why the ASA doesn't show but i am confused why our perimeter router which is the next hop device after our ASA fails to show in the traceroute results. I connected a laptop to a switch which connectes to the perimter router and traceroute tests show it responding.
Checking the ASA i am able to verify the below:
1. ip inspect icmp and ip inspect icmp error is enabled globally on the ASA. 2. Applied ACL on outside interface allowing all ICMPs to inside. 3. Applied ACL on inside interface allowing all ICMPs to outside. 4. Traceroute from ASA shows perimter router replying.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...