08-27-2008 01:41 AM
I'm using IP SLA Monitor with a default ICMP Jitter operation to the inside ASA interface, but the firewall does not respond.
How can I enable a reply to a timestamp request message?
Thanks.
08-27-2008 11:13 AM
permit icmp any host src dst timestamp-reply
Since ICMP Jitter probe is sending ICMP echo requests, you'd need at least the following too:
permit icmp any host src dst echo-reply
08-28-2008 12:37 AM
To permit ICMP to ASA interface I must use ICMP command with the specific argument.
But this does not work for all ICMP messages.
I believe this has be done to protect firewall.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide