{"id":4082,"date":"2018-12-07T16:30:20","date_gmt":"2018-12-07T15:30:20","guid":{"rendered":"https:\/\/nil.uniza.sk\/?p=4082"},"modified":"2018-12-07T16:30:20","modified_gmt":"2018-12-07T15:30:20","slug":"enabling-traceroute-on-cisco-asa","status":"publish","type":"post","link":"https:\/\/nil.uniza.sk\/en\/enabling-traceroute-on-cisco-asa\/","title":{"rendered":"Enabling traceroute on Cisco ASA"},"content":{"rendered":"

There are three steps to enable traceroute:<\/p>\n

    \n
  1. In policy map „global_policy“ in class „inspection_default“ you need to add „inspect icmp“ and „inspect icmp error“<\/li>\n
  2. In policy map „global_policy“ in class „class_default“ you need to add „set connection decrement-ttl“<\/li>\n
  3. On your oudside interface, you need add access list, that permits ICMP with „time-exceeded“ on ingress direction<\/li>\n<\/ol>\n

    There is code, that you can paste in your ASA firewall:<\/p>\n

    policy-map global_policy\r\n  class inspection_default\r\n    inspect icmp\r\n    inspect icmp error\r\n    exit\r\n  class class-default\r\n    set connection decrement-ttl\r\n    exit\r\n  exit\r\naccess-list OUTSIDE-IN extended permit icmp any any time-exceeded\r\n<\/pre>\n
     <\/p>","protected":false},"excerpt":{"rendered":"
    There are three steps to enable traceroute: In policy map „global_policy“ in class „inspection_default“ you need to add „inspect icmp“ and „inspect icmp error“ In policy map „global_policy“ in class „class_default“ you need to add „set connection decrement-ttl“ On your oudside interface, you need add access list, that permits ICMP with „time-exceeded“ on ingress direction…<\/p>","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[749],"tags":[],"class_list":["post-4082","post","type-post","status-publish","format-standard","hentry","category-asa-en"],"taxonomy_info":{"category":[{"value":749,"label":"ASA"}]},"featured_image_src_large":false,"author_info":{"display_name":"Marek Moravcik","author_link":"https:\/\/nil.uniza.sk\/en\/author\/marek\/"},"comment_info":14,"category_info":[{"term_id":749,"name":"ASA","slug":"asa-en","term_group":0,"term_taxonomy_id":747,"taxonomy":"category","description":"","parent":747,"count":5,"filter":"raw","cat_ID":749,"category_count":5,"category_description":"","cat_name":"ASA","category_nicename":"asa-en","category_parent":747}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/posts\/4082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/comments?post=4082"}],"version-history":[{"count":0,"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/posts\/4082\/revisions"}],"wp:attachment":[{"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/media?parent=4082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/categories?post=4082"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nil.uniza.sk\/en\/wp-json\/wp\/v2\/tags?post=4082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}