Allow tracert and pathping through firewall

[Andy White]

Hello,

Whenever I pathping or tracert from my PC through the firewall to other VLAN's (sub interfaces) or VPN's, where don't see the IP's appear like below, we just get  lots of *, Iguess it is just hinding itself.  Can I get this to show?

If I pathping or tracert from my PC to an IP on the internet it is fine.

C:\Users\admin>pathping 172.30.11.20

Tracing route to 172.30.11.20 over a maximum of 30 hops

  0  wksadmin.f1.local [192.168.9.11]

  1  192.168.9.253

  2     *        *        *

Computing statistics for 25 seconds...

Thanks

[sean_evershed]

Hi, Do you have ICMP inspection enabled or an ACL configured on your firewall? See below

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml