WAN Int Ping issue

[Najib Akbari]

Stupid issue struggling to figure out!!!

I have an ISR and working fine, just wanted to enable ping to the WAN Link from outside and I feel bad Im not able to do it. there is no config on the Interface seems blocking it so what should I check???!!!!

[Jan Rolny]

Hi Najib,

I am not sure if I understand your answer. So you say "pingable router" and "this router". If you see ICMP packet in capture on pingable router connected to the same line as original router which is not responding to ping, so then definitely there is something wrong with that name it "original router". But if also laptop was connected to same ISP line, and you are sure firewall on that computer was turned off and you are 100% sure this computer is pingable, and you don't see any response, so then its most probable that ISP is blocking such traffic. 

It's not that usual that ISP is blocking traffic, but it can happen.

[Najib Akbari]

sorry for the confusion. I compared the site with ping issue ( lets call it site A ) to a site at different location and different ISP ( lets call it site B

Site A, I do not get response when I ping Site A public IP and do not see any data on monitor capture. but on Site B which get ping response I also see data in monitor capture.

my question is, no matter if there is policy to block ICMP or not I still have to see monitor capture for ICMP traffic coming to the router?

[srimal99]

@Najib Akbari  can you take a Wireshark capture and filter with icmp.type==3 or icmp.type==3 && icmp.code==13 . Then firewall from ISP is blocking it.

[Jan Rolny]

If you would have ACL applied on interface so you will still see traffic in captured buffer. Also, in your post and screenshot interface does not have any ACL applied anyway.