Thursday, June 22, 2023

 ASA Firewall allow traceroute


access-list outside_acl_in extended permit icmp any any time-exceeded
access-list outside_acl_in extended permit icmp any any unreachable
!
access-group outside_acl_in in interface outside

!
policy-map global_policy
 class inspection_default
  inspect icmp
  inspect icmp error
at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)

C8000v : logging filtering with discriminator

When log in filled up with: Sep 15 11:25:51.185 UTC: %SMART_LIC-2-PLATFORM_ERROR: Smart Licensing has encountered an internal software error...

  • eve-ng : When a node won't start
      /var/log/syslog shows: Jun 18 11:21:18 labusraeveng01 iol_wrapper[105334]: 18/5 15:21:18.639 ERR#011Error while connecting local AF_UNIX: ...
  • Arista Zero Touch Provisioning
    zerotouch cancel -> only for current uptime (reload will start ZTP again) zerotouch disable -> forever to reenable zerotouch do: ...
  • OpenWRT linksys with TC and NETEM
      install openwrt on e4200v2  Open ssh and http on the WAN (disable firewall) Via GUI of openwrt (LuCi) install tc-full and kmod-netem Injec...