Traceroute using PAT

[Tauer Drumond]

Hi all,

I'm trying to traceroute from Windows PC through CISCO ASA IOS 9.1(1) - Multiple Contexts

When I'm using PAT, traceroute doesn't work

When I'm using static NAT 1 to 1, traceroute works!

I can't figured out what can be. Please help.

[Rishabh Seth]

Hi,

Ideally it should work but as you have mentioned it is gaining in your setup so you can try following :

>> try enabling/ disabling ICMP inspection for traffic and check if it helps.

>> apply captures for ICMP and check if you are getting ICMP error messages from intermediate devices.

>> Are you using UDP based tracroute?

Thanks,

Rishabh Seth

PS : Rate if it helps.

[Tauer Drumond]

Hi Seth,

ICMP inspection is enabled. Even when I disable it, traceroute with PAT and NAT doens't work. When enabled, only with static NAT works.

On windows machine I've captured the packtes, but nothing abnormal. I'll capture the packtes from intermediate devices

I'm using ICMP based traceroute