The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Cannot create ICMP service with Type and Code on Cisco router
| Solution ID |
sk101500 |
| Product |
Security Management |
| Version |
R77, R77.10 |
| Date Created |
03-Jul-2014
|
| Last Modified |
27-May-2015
|
Symptoms
- When defining an ICMP service with Type and Code and install it on Cisco router, the ICMP code value is ignored.
For example, when trying to create a rule ICMP Type 3 Code 4 and install it on Cisco router, it only creates a rule ICMP Type 3.
- The
show run command on Cisco target shows:
permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 unreachable
While the desired output is:
permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 packet-too-big
Solution
|
Note: To view this solution you need to
Sign In
.
|
