09-24-2025 05:46 PM - edited 09-24-2025 07:32 PM
icmp-tunnling is enabled by default or needs some configuration to enable it ?
Juniper has an explicit configuration "set protocols mpls icmp-tunneling"
It seems Cisco enabled icmp-tunneling by default. Right ? possible to disable ?
R1#traceroute 172.31.1.6 num Type escape sequence to abort. Tracing the route to 172.31.1.6 VRF info: (vrf in name/id, vrf out name/id) 1 172.16.1.2 0 msec 0 msec 0 msec 2 10.10.1.3 [MPLS: Label 19 Exp 0] 1 msec 1 msec 0 msec 3 10.10.2.4 [MPLS: Label 20 Exp 0] 1 msec 0 msec 1 msec 4 10.10.3.5 1 msec 0 msec 1 msec 5 172.31.1.6 1 msec * 2 msec
one thing puzzles me. The first 6 lines. Anyone can shed some lights on them ?
thanks !!
Solved! Go to Solution.
09-24-2025 11:53 PM - edited 09-24-2025 11:53 PM
Hello @gongya
Your point make reference to RFC_4950: https://www.rfc-editor.org/rfc/rfc4950.html
Cisco routers support for that RFC 4950 ICMP extensions for MPLS is built in and generaly enabled by default. That’s te reason why, when you do a traceroute through an MPLS core, cisco platform naturally include the MPLS label stack in the icmp Time exceeded or destination unreachable reply — so exactly as RFC 4950 specify...
Also, cisco not disable RFC 4950 directly.. instead, admin control visibility by turning off TTL propagation with no mpls ip propagate-ttl command, which prevents TTL expiry inside the MPLS core so ICMP responses are never triggered there !
09-24-2025 11:53 PM - edited 09-24-2025 11:53 PM
Hello @gongya
Your point make reference to RFC_4950: https://www.rfc-editor.org/rfc/rfc4950.html
Cisco routers support for that RFC 4950 ICMP extensions for MPLS is built in and generaly enabled by default. That’s te reason why, when you do a traceroute through an MPLS core, cisco platform naturally include the MPLS label stack in the icmp Time exceeded or destination unreachable reply — so exactly as RFC 4950 specify...
Also, cisco not disable RFC 4950 directly.. instead, admin control visibility by turning off TTL propagation with no mpls ip propagate-ttl command, which prevents TTL expiry inside the MPLS core so ICMP responses are never triggered there !
09-25-2025 03:37 AM
thanks so much !!
09-25-2025 04:14 AM
You're so welcome @gongya
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide