Cisco ASA IPsec (pevman)

Mon, 21 Feb 2011 05:25:51 GMT

ciscoasa# packet-tracer input inside icmp 192.168.20.4 0 0 192.168.0.104 de$

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 outside

Phase: 2
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Forward Flow based lookup yields rule:
in id=0xcabe73a8, priority=0, domain=inspect-ip-options, deny=true
hits=44957, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
src ip/id=0.0.0.0, mask=0.0.0.0, port=0
dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
input_ifc=inside, output_ifc=any

Phase: 3
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect icmp
service-policy global_policy global
Additional Information:
Forward Flow based lookup yields rule:
in id=0xcb5ce658, priority=70, domain=inspect-icmp, deny=false

OpenForum RSS: Cisco ASA IPsec

Cisco ASA IPsec (pevman)