cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1085
Views
0
Helpful
2
Replies

ICMP Jitter operation timeout.

andrea.meconi
Level 2
Level 2

I'm using IP SLA Monitor with a default ICMP Jitter operation to the inside ASA interface, but the firewall does not respond.

How can I enable a reply to a timestamp request message?

Thanks.

2 Replies 2

yjdabear
VIP Alumni
VIP Alumni

permit icmp any host src dst timestamp-reply

Since ICMP Jitter probe is sending ICMP echo requests, you'd need at least the following too:

permit icmp any host src dst echo-reply

To permit ICMP to ASA interface I must use ICMP command with the specific argument.

But this does not work for all ICMP messages.

I believe this has be done to protect firewall.