Hi allWhen I'm using catalyst or other with IOS-XE, I use local policy to restrict sw to be trace route by traceroute.Just like below ip access-list extended BLOCK_TRACEpermit icmp any any time-exceededpermit icmp any any port-unreachablepermit icmp ...