cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Permitting Traceroute reply

afshan_nava
Beginner
Beginner

Hi Everyone

can someone pls tell me the difference between the two lines belown in an access-list.

permit icmp any any time-exceeded

and

permit icmp any any ttl-exceeded

Thanks

Afshan

2 REPLIES 2

Sudeep Valengattil
Cisco Employee
Cisco Employee

Here is my understanding;

Type 11 — Time Exceeded

Codes     Description

  0           Time to Live exceeded in Transit

  1           Fragment Reassembly Time Exceeded

If you permit "time-exceeded", it would permit both codes 0 and 1

If you permit "ttl-exceeded", it would permint code 0.

Also check below link

http://www.firewall.cx/networking-topics/protocols/icmp-protocol/156-icmp-time-exceeded.html

Hi Sudeep

Did u find any document from cisco that says so?

Afshan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: