ASR1000 hide its IP for Traceroute

cedar_lee · ‎03-25-2014

Hi,

We have ASR1000 routers as MPLS WAN edge routers. We find out ASR1000 use destination clients' IP addresses instead of ASR their own IP addresses when response to traceroute. We think it should be some kind of security function in ASR to hide their IP addresses. Is there any way to turn this function off? Any negative impact?

Thanks

Cedar

Mike Williams · ‎03-25-2014

I have been using a pair of ASR 1002s for a couple years and have not seen that behavior. For the most part, the ASRs behave the same as any other router and should respond to ICMP and traceroute the same. I can't even think of a configuration that would cause the behavior you are describing.

Might be a good idea to open a TAC case for this.

Regards,

Mike

cedar_lee · ‎03-26-2014

It happened not just on one or two ASR routers we have.

Maybe a TAC case is a good idea.

Thanks

Cedar