ICMP traffic is punted on CPU only if destination address matches any ASR903 interface IP. If CEF is enabled any transit traffic should be handled by forwarding engine and not punted to CPU. You should perform tests generating traffic between 2 end h...