topic Hi Seth, in Network Security

Traceroute using PAT

Tauer Drumond — Tue, 12 Mar 2019 06:56:07 GMT

Hi all,

I'm trying to traceroute from Windows PC through CISCO ASA IOS 9.1(1) - Multiple Contexts

When I'm using PAT, traceroute doesn't work

When I'm using static NAT 1 to 1, traceroute works!

I can't figured out what can be. Please help.

Rishabh Seth — Mon, 23 Nov 2015 18:50:21 GMT

Hi,

Ideally it should work but as you have mentioned it is gaining in your setup so you can try following :

>> try enabling/ disabling ICMP inspection for traffic and check if it helps.

>> apply captures for ICMP and check if you are getting ICMP error messages from intermediate devices.

>> Are you using UDP based tracroute?

Thanks,

Rishabh Seth

PS : Rate if it helps.

Tauer Drumond — Mon, 23 Nov 2015 18:54:38 GMT

Hi Seth,

ICMP inspection is enabled. Even when I disable it, traceroute with PAT and NAT doens't work. When enabled, only with static NAT works.

On windows machine I've captured the packtes, but nothing abnormal. I'll capture the packtes from intermediate devices

I'm using ICMP based traceroute