Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Ping but not traceroute

Hi Experts,

Is it possible to configure that we should get ping but not traceroute. If yes,then how to configure.

3 REPLIES
New Member

Re: Ping but not traceroute

hi,

pls try below commands on incomming interface of router, hope this will work!

ip access-list extended TRACE

deny icmp any any traceroute

permit ip any any

New Member

Re: Ping but not traceroute

Hi sourabh,

Thanks for your reply , but it's not working. If you have any other solution ,please share.

Hall of Fame Super Silver

Re: Ping but not traceroute

suryakant

While there is an ICMP message type for traceroute (ICMP message type 30) it is not what is commonly used in traceroute and so the suggestion from sourabh would not work well.

Whether you can implement a filter that will permit ping and not permit traceroute depends on what type of device is generating the traceroute. Since Unix and IOS generate traceroute sending UDP packets to high number ports you may be able to construct a filter to deny this traffic (being careful not to block UDP ports that you might actually need). But since Windows machines (using the tracert command) send ping packets, you would not be able to construct a filter that would deny traceroute and permit ping.

HTH

Rick

2070
Views
3
Helpful
3
Replies
CreatePlease to create content