topic Re: icmp translation in Network Security https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322122#M828970 <HTML><HEAD></HEAD><BODY><P>do u have translation defined from traffic from inside to outside ,</P><P></P><P></P><P>nat (inside) 1 0 0</P><P>glo (outside) 1 interface</P><P></P><P></P><P></P></BODY></HTML> Tue, 04 Aug 2009 22:20:41 GMT suschoud 2009-08-04T22:20:41Z icmp translation https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322120#M828952 <P>i am getting the following error in my syslogs:</P><P></P><P>regular translation creation failed for icmp src inside:x.x.x.x dst outside:x.x.x.x (type 3, code 3)</P><P></P><P>although everything appears to be working fine. any thoughts?</P> Mon, 11 Mar 2019 16:00:32 GMT https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322120#M828952 bmarms 2019-03-11T16:00:32Z Re: icmp translation https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322121#M828962 <HTML><HEAD></HEAD><BODY><P>This message can be either an internal error or an error in the configuration.</P><P></P><P>%PIX-3-305006: Regular translation creation failed for protocol src int_name:IP_addr/port dst int_name:IP_addr/port </P><P></P><P>A protocol (UDP, TCP, or ICMP) failed to create a translation through the PIX Firewall. This message appears as a fix to caveat CSCdr0063 that requested that PIX Firewall not allow packets destined to network or broadcast addresses. PIX Firewall provides this checking for addresses that are explicitly identified with static command statements. With the change, for inbound traffic, PIX Firewall denies translations for a destined IP address identified as a network or broadcast address. </P><P></P><P></P></BODY></HTML> Tue, 04 Aug 2009 22:07:45 GMT https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322121#M828962 tstanik 2009-08-04T22:07:45Z Re: icmp translation https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322122#M828970 <HTML><HEAD></HEAD><BODY><P>do u have translation defined from traffic from inside to outside ,</P><P></P><P></P><P>nat (inside) 1 0 0</P><P>glo (outside) 1 interface</P><P></P><P></P><P></P></BODY></HTML> Tue, 04 Aug 2009 22:20:41 GMT https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322122#M828970 suschoud 2009-08-04T22:20:41Z Re: icmp translation https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322123#M828976 <HTML><HEAD></HEAD><BODY><P>absolutely.</P><P></P><P>nat (inside) 1 10.0.0.0 255.0.0.0</P><P>global (outside) 1 interface</P></BODY></HTML> Wed, 05 Aug 2009 10:44:25 GMT https://community.cisco.com/t5/network-security/icmp-translation/m-p/1322123#M828976 bmarms 2009-08-05T10:44:25Z