Thanks for testing and sharing the results! Marta Sokolowska.
2012/3/11 Imre Oszkar <[email protected]> Hi Marta, > > Yes, the Command Reference description makes much more sense! it's funny > that the other description is in the "revised" config-guide:) > I have tested the ICMP Timestamp Reply and it is allowed. Below is the > debug output: > > *Mar 11 06:08:22.067: FIREWALL: ICMP Timestamp pkt 136.1.121.100 => > 136.1.122.6 > *Mar 11 06:08:22.067: FIREWALL* OBJ_CREATE: Pak 67353330 sis 67C50124 > initiator_addr (136.1.121.100:13) responder_addr (136.1.122.6:0) > initiator_alt_addr (136.1.121.100:13) responder_alt_addr (136.1.122.6:0) > *Mar 11 06:08:22.067: FIREWALL icmp_info created: 0x67681CD8 > *Mar 11 06:08:22.067: FIREWALL OBJ-CREATE: sid 67A0613C acl deny-any Prot: > icmp > *Mar 11 06:08:22.067: Src 136.1.122.6 Port [0:0] > *Mar 11 06:08:22.067: Dst 136.1.121.100 Port [14:14] > *Mar 11 06:08:22.067: FIREWALL OBJ-CREATE: sid 67A06190 acl deny-any Prot: > icmp > *Mar 11 06:08:22.067: Src 0.0.0.0 Port [0:0] > *Mar 11 06:08:22.067: Dst 136.1.121.100 Port [3:3] > *Mar 11 06:08:22.067: FIREWALL OBJ-CREATE: sid 67A061E4 acl deny-any Prot: > icmp > *Mar 11 06:08:22.067: Src 0.0.0.0 Port [0:0] > *Mar 11 06:08:22.067: Dst 136.1.121.100 Port [11:11] > *Mar 11 06:08:22.067: FIREWALL: ICMP Timestamp Reply pkt 136.1.122.6 => > 136.1.121.100 > > Thanks! > Oszkar > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
