Hi, ICMP Error inspection will change IP address in ICMP error messages (like time exceeded) when there is translation in place for that host. For example, when you run traceroute for a host behind the ASA, and this host is translated, the behavior without icmp error inspection is that you see original IP address (untranslated). If you enable inspection, you'll see translated IP address in the traceroute output.
You must really see that working to understand it :) Regards, Piotr 2011/1/30 Kamran Shakil <[email protected]> > > What is the true use of this : > > inspect ICMP ERROR > > I have used it, and there is option for inspect ICMP ? > > i believe it serves a different purpose than normal INSPECT ICMP !!! > > > Can anyone plz explain this. > > regards, > Kamran. > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
