Hi Chris,
The ICMP code 13 means communication administratively prohibited (e.g.
firewall blocked)
For your case I think it was due to the access list.
Other ICMP code:
0 - network unreachable
1 - host unreachable
2 - protocol unreachable
3 - fragmentation needed and the do=not-fragment bit set
5 - source route failed
7 - destination host unknown
11 - network unreachable for type of service (TOP)
12 - host unreachable for type of service
13 - communicaton administratively prohibited (e.g. firewall blocked)
14 - host precedence violation
15 - precedence cut-off in effect
You can find more detail information from the following document in Chapter
2 Section 4 which covers ICMP in detail:
http://www.ireste.fr/fdl/ars/rpoly/pdf/s_serv2.pdf
Regards,
Ronny
CCNP
----- Original Message -----
From: Burnham, Chris
To:
Sent: Friday, June 08, 2001 6:41 PM
Subject: ICMP type 3 code ?????????? [7:7697]
> Question guys,
> I have received the following back from a ciso router that I
> do not have control over. ICMP type 3 code 0xd.
> hex d = decimal 13. This code value 13 doesn't exist. Is this due to an
> inbound access-list? any ideas? Look at the packet debug below and let
me
> know your opinions.
>
> -- IP --
> 192.168.240.2 ==> 10.108.226.7
>
> ver = 0x4 hlen = 0x5 tos = 0x0 tlen = 0x38
> id = 0x739d flags = 0x0 frag off=0x0
> ttl = 0xfe proto=0x1 chksum = 0xac08
>
> -- ICMP --
> type = 0x3 code = 0xd checksum=0xf5a0
> identifier = 0x0 seq = 0x0
> -- DATA --
> 0000001c: 45 00 00 54 b0 07 40 00 fc 01 d5 d6 0a 6c e2 07
|
> [email protected]..
> 0000002c: 0a d0 01 87 08 00 c9 b0 35 a1 00 00 22
|
> ........5..."
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7704&t=7697
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
