topic traceroute on ASA in Network Security

traceroute on ASA

Rizwan Khan — Tue, 12 Mar 2019 06:33:23 GMT

Hello Experts,

My question is how to enable traceroute on cisco ASA. I have seen alot of examples which allow traceroute through the ASA. However i am looking to enable traceroute on ASA itself. Like if i have an outside interface with IP 1.1.1.1 i could do traceroute to that IP 1.1.1.1. From windows i am able to do so as it uses icmp protocol. But what about linux/IOS which uses udp for traceroute.

Thanks in advance.

I am not 100% sure what you

nspasov — Sun, 06 Sep 2015 00:18:31 GMT

I am not 100% sure what you are trying to accomplish. Can you perhaps elaborate a bit more? The traceroute command is supported valid command and you can trace issue is from the ASA directly.

Thank you for rating helpful posts!

Hi. I want to trace route

Rizwan Khan — Sun, 06 Sep 2015 12:40:29 GMT

Hi.

I want to trace route Cisco asa outside interface from another source. We have two different data centres. I want dc B edge Router to be able to trace route dc A edge firewall outside interface. When I do so. It denies any udp packet.

Take a look at the following

nspasov — Mon, 07 Sep 2015 18:50:00 GMT

Take a look at the following link:

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/15246-31.html

Thank you for rating helpful posts!

change the the access-list

Dennis Mink — Mon, 07 Sep 2015 23:30:31 GMT

change the the access-list for your outside interface at dcA, to allow icmp from your dc B on the outside interface.