cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
761
Views
0
Helpful
1
Replies

Traceroute not working on ACE

fariha zain
Level 1
Level 1

Hi,

My setup is :

Source--- Router 1 ( ip 1.1.1.1) --ACE---router---cloud---customer---router--destination( ip 99.99.99.99).

Traceroute from client to destination shows the following:

traceroute 99.99.99.99

traceroute to 99.99.99.99 (99.99.99.99), 30 hops max, 40 byte packets

1  1.1.1.1 (1.1.1.1)  1.10 ms  1.78 ms

2  99.99.99.99 (99.99.99.99)  1.01 ms  1.97 ms  2.511 ms

3  99.99.99.99 (99.99.99.99)  2.01 ms * 99.99.99.99 (99.99.99.99)  2.330 ms

4  99.99.99.99 (99.99.99.99)  1.11 ms  2.21 ms 

5  99.99.99.99 (99.99.99.99)  2.41 ms  2.58 ms 

6  99.99.99.99 (99.99.99.99)  3.21 ms  3.150 ms

7  99.99.99.99 (99.99.99.99)  4.89 ms  4.57 ms 

8  99.99.99.99 (99.99.99.99)  4.27 ms  4.89 ms 

So on this, the destination is 99.99.99.99.The first hop is the default gateway, which is 1.1.1.1.

After that, the next step is the Cisco ACE.After that there are several hops to the destination.

Looks like for some reason the Cisco ACE is not recording his ip.( For any destination traceroute result is the saame.

ICMP is allowed in the access list

and also ther is ICMP inspect in my config.

access-list ICMP line 10 extended permit icmp any any

class-map type management match-any abc

  201 match protocol ssh source-address X.X.0.0 x.x.0.0

class-map match-all ICMP_allow

  2 match access-list ICMP

policy-map multi-match ICMP2

  class ICMP_allow

    inspect icmp error

int vlan 111

service-policy input ICMP2

no shut

Version running on ACE is  Version A2(3.3)

any help would be appriciated.

Thanks

Fariha

1 Reply 1

ohynderi
Level 1
Level 1

Fariha,

Applying the icmp error inspect should do the trick. Just make sure to apply the policy on the proper interface (ingress or globaly) and that icmp traffic doesn't hit a connection created before applying the inspect (so better to "clear conn flow icmp...).


Thanks,

Olivier

Review Cisco Networking for a $25 gift card