Trace Route Doesn't Return DNS Name

patrick.hurley — Tue, 12 Mar 2019 01:56:23 GMT

I changed from a Linksys E4200 to a 5505 and when I use trace route, it doesn't return a DNS name for each hop. I can see the hops shown as asterisks. Do I have to add something to inspect for this to work?

Trace Route Doesn't Return DNS Name

Jouni Forss — Wed, 12 Jun 2013 10:35:52 GMT

Hi,

You could try the following. (Depending if your "policy-map" configuration is as its default settings)

policy-map global_policy

class inspection_default

inspect icmp error

inspect icmp

Then you could add the following to your ACL attached to your "outside" interface or configure a new ACL to your "outside" interface if it doesnt yet exist

access-list OUTSIDE-IN remark Allow ICMP return messages

access-list OUTSIDE-IN permit icmp any any unreachable

access-list OUTSIDE-IN permit icmp any any time-exceeded

access-list OUTSIDE-IN permit icmp any any echo-reply

access-group OUTSIDE-IN in interface outside

You will naturally use the existing ACL if you have one. If no ACL exists you can use the above configuration as it is.

Hope this helps

Please remember to mark the reply as the correct answer if it answered your question.

Ask more if needed

- Jouni

topic Trace Route Doesn't Return DNS Name in Network Security

Trace Route Doesn't Return DNS Name

Trace Route Doesn't Return DNS Name