Cannot create ICMP service with Type and Code on Cisco router

Support Center > Search Results > SecureKnowledge Details

Technical Level

Symptoms

When defining an ICMP service with Type and Code and install it on Cisco router, the ICMP code value is ignored.

For example, when trying to create a rule ICMP Type 3 Code 4 and install it on Cisco router, it only creates a rule ICMP Type 3.
The show run command on Cisco target shows:
permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 unreachable

While the desired output is:

permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 packet-too-big

Solution

Note: To view this solution you need to Sign In .