MY-4506#traceroute 10.196.208.51
Type escape sequence to abort.
Tracing the route to 10.196.208.51
VRF info: (vrf in name/id, vrf out name/id)
1 192.168.173.1 0 msec 4 msec 0 msec
2 10.196.208.51 116 msec 120 msec 116 msec
3 10.196.208.51 116 msec 120 msec 120 msec
4 10.196.208.51 120 msec 120 msec 124 msec
5 10.196.208.51 160 msec 160 msec 152 msec
6 10.196.208.51 160 msec 216 msec 160 msec
7 10.196.208.51 176 msec 180 msec 180 msec
8 10.196.208.51 180 msec 180 msec 184 msec
9 * * *
10 * * *
11 *
MY-FW1# sh access-list outside_access_in2
access-list outside_access_in2; 2 elements; name hash: 0xaad05234
access-list outside_access_in2 line 1 remark ICMP type 11 for Windows Traceroute
access-list outside_access_in2 line 2 extended permit icmp any any time-exceeded (hitcnt=69) 0xd2fb56da
access-list outside_access_in2 line 3 remark ICMP type 3 for Cisco and Linux
access-list outside_access_in2 line 4 extended permit icmp any any unreachable (hitcnt=6) 0x03a270b6
MY-FW1#
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 1024
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect http
inspect ils
inspect pptp
inspect rsh
inspect skinny
inspect sqlnet
inspect tftp
inspect ip-options
inspect icmp error
inspect icmp
class class-default
user-statistics accounting
set connection decrement-ttl
access-group outside_access_in2 in interface outside2
