[c-nsp] icmperr message in the nat table
Brett Looney
brett at looney.id.au
Sat Mar 25 20:14:28 EST 2006
At 01:24 25/03/2006, you wrote:
>I get the following entries in the NAT table =
>
>icmperr 204.11.126.129 10.2.8.84 --- ---
>icmperr 204.11.126.129 10.2.8.99 --- ---
>
>The hosts stop responding after that. What could be the reason? Didn't
>get much help from the Cisco site.
I've had this happen a few times but never been able to determine
what ICMP packet is causing the problem.
Two solutions:
1. Block ICMP from affected internal hosts.
2. Upgrade to 12.3(14)T5 or later (this is on a 28xx platform).
HTH
B.
More information about the cisco-nsp
mailing list