hello
i config my firepower like this
https://integratingit.wordpress.com/2019/10/12/ftd-allow-traceroute/
but i dont traceroute through FTD
1 1 ms 1 ms 1 ms 192.168.58.1
2 1 ms 1 ms 1 ms 192.168.57.7
3 * * * Request timed out. ==== my firepower
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
7 * * * Request timed out.
8 * * * Request timed out.
9 * * * Request timed out.
10 * * * Request timed out.
11 * * * Request timed out.
12 * * * Request timed out.
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 93 ms 93 ms 92 ms 1.1.1.1
Trace complete.
my policy config :
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect icmp
inspect icmp error
inspect ip-options UM_STATIC_IP_OPTIONS_MAP
inspect pptp
class class_map_TRACEROURTE_ACL
set connection timeout idle 1:00:00
set connection decrement-ttl
class class-default
set connection advanced-options UM_STATIC_TCP_MAP
set connection decrement-ttl
!
service-policy global_policy global
=================
firepower version:
Model : Cisco Firepower 2110 Threat Defense (77) Version 6.6.1 (Build 90)
what my problem ?
can help me ?
