topic Deny (type 11, code 0) in Network Security https://community.cisco.com/t5/network-security/deny-type-11-code-0/m-p/1571954#M603894 <P>hi,</P><P></P><P>i have a acl allowed IP traffic for the inside lan.</P><P>If i perform a tracert it did not work....&nbsp; How can i activate (icmp type 11) ?</P><P></P><P>Here the log entry from the ASA:</P><P>Deny icmp src outside: dst inside: (type 11, code 0)</P> Mon, 11 Mar 2019 18:37:38 GMT born.jason 2019-03-11T18:37:38Z Deny (type 11, code 0) https://community.cisco.com/t5/network-security/deny-type-11-code-0/m-p/1571954#M603894 <P>hi,</P><P></P><P>i have a acl allowed IP traffic for the inside lan.</P><P>If i perform a tracert it did not work....&nbsp; How can i activate (icmp type 11) ?</P><P></P><P>Here the log entry from the ASA:</P><P>Deny icmp src outside: dst inside: (type 11, code 0)</P> Mon, 11 Mar 2019 18:37:38 GMT https://community.cisco.com/t5/network-security/deny-type-11-code-0/m-p/1571954#M603894 born.jason 2019-03-11T18:37:38Z Re: tracert - Deny icmp (type 11, code 0) https://community.cisco.com/t5/network-security/deny-type-11-code-0/m-p/1571955#M603895 <HTML><HEAD></HEAD><BODY><P>ok, have fixed it.</P><P>permit icmp to the outside interface.</P></BODY></HTML> Thu, 09 Sep 2010 09:06:43 GMT https://community.cisco.com/t5/network-security/deny-type-11-code-0/m-p/1571955#M603895 born.jason 2010-09-09T09:06:43Z