topic Re: ASA 5515-X Denied IMCP type=8, code=0 problem in Network Security

ASA 5515-X Denied IMCP type=8, code=0 problem

jkay18041 — Fri, 24 Apr 2020 16:08:43 GMT

I have an ASA that I keep getting this error in the ASDM Syslog messages which I need to fix to troubleshoot a device.

Severity 3 Syslog ID 313001 Denied ICMP type=8, code=0 from 10.21.1.100 on interface Work_interfaces

I am a rule that permits ICMP on that interface, so I'm not sure why it's getting blocked.

Re: ASA 5515-X Denied IMCP type=8, code=0 problem

Jeff Horton — Fri, 24 Apr 2020 19:15:14 GMT

Found this and you may have too.. My suggestion without knowing the ACL is to move your permit up to the top of the list for that interface and see if that helps.. Just do this through ASDM and it will be easier. Click on the line with the permit and then click on the up arrow. It needs to be above any "deny any any" rule.

Hope this helps.

313001

Error Message %ASA-3-313001: Denied ICMP type=number , code=code from IP_address on interface interface_name

Explanation When using the icmp command with an access list, if the first matched entry is a permit entry, the ICMP packet continues processing. If the first matched entry is a deny entry, or an entry is not matched, the ASA discards the ICMP packet and generates this message. The icmp command enables or disables pinging to an interface. With pinging disabled, the ASA cannot be detected on the network. This feature is also referred to as configurable proxy pinging.

Recommended Action Contact the administrator of the peer device.

Re: ASA 5515-X Denied IMCP type=8, code=0 problem

jkay18041 — Fri, 24 Apr 2020 20:12:31 GMT

So I have the permit any any rule for icmp at the top.

Not sure if this matters or not but this is traffic over a ipsec site to site vpn.

Thank you

Re: ASA 5515-X Denied IMCP type=8, code=0 problem

balaji.bandi — Fri, 24 Apr 2020 21:49:50 GMT

Can you post the configuraiton of ACL to Look.

Re: ASA 5515-X Denied IMCP type=8, code=0 problem

torwals — Tue, 24 Sep 2024 08:34:22 GMT

Was this problem ever solved @jkay18041?

Re: ASA 5515-X Denied IMCP type=8, code=0 problem

MHM Cisco World — Tue, 24 Sep 2024 08:36:11 GMT

Make new post it better

MHM