Hi all

Can someone please let me know, where would we actually use "inspect icmp
error". I am not getting the right explanation.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/i2.html#wp1726194


With inspect icmp error enabled, I tried to IOS traceroute from outside to a
host behind the ASA. With "set connection decrement-ttl", the internel
address is revealed.

Do we use "inspect icmp error", to reveal the actual internal IP address?



With regards
Kings
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to