Trace command in PIX v7.0

acharyr123 — Mon, 11 Mar 2019 12:01:14 GMT

Hi,

By default trace/traceroute can't be executed in pix/asa. But i believe it can be enabled.

Can someone suggest me with the sample config of the same!!

The running iOS version is 7.0

Re: Trace command in PIX v7.0

JORGE RODRIGUEZ — Mon, 11 Feb 2008 07:19:01 GMT

Partha,

Try one of these two methods.

access-list 101 permit icmp any any echo-reply

access-list 101 permit icmp any any source-quench

access-list 101 permit icmp any any unreachable

access-list 101 permit icmp any any time-exceeded

access-group 101 in interface outside

policy-map global_policy

class inspection_default

inspect icmp

Check this link for more details on PIX/ASA ICMP and traceroutes handling.

Rgds

Jorge