Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

After filtering 92byte ping packet, can't traceroute...T.T

After filtering 92byte ping packet, can't traceroute...T.T

hi.

After deny 92byte ping packet,

We can't traceroute...

help me..T.T

internet -- 7513 -- 6509MSFC2--- Cat3500XL

[1] Cisco 7513router(rsp-jsv-mz.121-20.bin)

int s1/1/1

ip policy route-map welchia

int gi3/0/0

ip policy route-map welchia

ip access-list extended ping

permit icmp any any echo

permit icmp any any echo-reply

route-map welchia permit 10

match ip address ping

match length 92 92

set interface Null0

[2] MSFC2(c6msfc2-psv-mz.121-8a.E3)

int vlan 10

ip policy route-map welchia

int vlan 20

ip policy route-map welchia

...

...

ip access-list extended ping

permit icmp any any echo

permit icmp any any echo-reply

route-map welchia permit 10

match ip address ping

match length 92 92

set interface Null0

4 REPLIES
Bronze

Re: After filtering 92byte ping packet, can't traceroute...T.T

Are you doing traceroutes from a Windows machine? Windows machines use 92 byte traceroute probes.

Community Member

Re: After filtering 92byte ping packet, can't traceroute...T.T

thanks.

Have a good day~!

Bronze

Re: After filtering 92byte ping packet, can't traceroute...T.T

Are you doing traceroutes from a Windows machine? Windows machines use 92 byte traceroute probes.

Community Member

Re: After filtering 92byte ping packet, can't traceroute...T.T

Microsoft Windows tracert utility uses 92 bytes sized ICMP packets, so won't work if you are blocking this packet size.

Check out Cisco Security Notice documnet ID 44665 for more details.

122
Views
5
Helpful
4
Replies
CreatePlease to create content