[c-nsp] icmperr message in the nat table

Brett Looney brett at looney.id.au
Sat Mar 25 20:14:28 EST 2006


At 01:24 25/03/2006, you wrote:
>I get the following entries in the NAT table =
>
>icmperr 204.11.126.129 10.2.8.84          ---                ---
>icmperr 204.11.126.129 10.2.8.99          ---                ---
>
>The hosts stop responding after that. What could be the reason? Didn't
>get much help from the Cisco site.

I've had this happen a few times but never been able to determine 
what ICMP packet is causing the problem.

Two solutions:
1. Block ICMP from affected internal hosts.
2. Upgrade to 12.3(14)T5 or later (this is on a 28xx platform).

HTH

B. 



More information about the cisco-nsp mailing list