cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7958
Views
0
Helpful
2
Replies

Traceroute output !A * !A

Hi,

Quick one....

Getting this output doing a traceroute:

Router# trace 172.20.5.51  

  1 10.1.15.42 0 msec 0 msec 4 msec

  2 172.20.10.26 !A  *  !A

Everything is fine.

The IP 172.20.5.51 is a loopback of the same device that has the 172.20.10.26 on a physical interface (so the packet is getting to the destination fine, connectivity is fine).

But I haven't found the meaning of the !A  *  !A output.

Thank you!

Federico.

1 Accepted Solution

Accepted Solutions

darren.g
Level 5
Level 5

Federico Coto Fajardo wrote:

Hi,

Quick one....

Getting this output doing a traceroute:

Router# trace 172.20.5.51  

  1 10.1.15.42 0 msec 0 msec 4 msec

  2 172.20.10.26 !A  *  !A

Everything is fine.

The IP 172.20.5.51 is a loopback of the same device that has the 172.20.10.26 on a physical interface (so the packet is getting to the destination fine, connectivity is fine).

But I haven't found the meaning of the !A  *  !A output.

Thank you!

Federico.

The !A indicates an "Administratively Prohibited" reply was received from the remote node, the * indicates the probe timed out.

At a guess, the node at 172.20.10.26 has an access list on the interface which denies ICMP replies in some form or another.

This

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00800a6057.shtml

document contains a list of the Cisco traceroute replies in it.

Cheers.

View solution in original post

2 Replies 2

darren.g
Level 5
Level 5

Federico Coto Fajardo wrote:

Hi,

Quick one....

Getting this output doing a traceroute:

Router# trace 172.20.5.51  

  1 10.1.15.42 0 msec 0 msec 4 msec

  2 172.20.10.26 !A  *  !A

Everything is fine.

The IP 172.20.5.51 is a loopback of the same device that has the 172.20.10.26 on a physical interface (so the packet is getting to the destination fine, connectivity is fine).

But I haven't found the meaning of the !A  *  !A output.

Thank you!

Federico.

The !A indicates an "Administratively Prohibited" reply was received from the remote node, the * indicates the probe timed out.

At a guess, the node at 172.20.10.26 has an access list on the interface which denies ICMP replies in some form or another.

This

http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_tech_note09186a00800a6057.shtml

document contains a list of the Cisco traceroute replies in it.

Cheers.

Excellent Darren!

That was it!

Thank you very much :-)

Federico.