Hello_World_146
Jun 02, 2014Nimbostratus
ICMP Filter
Hi Team,
I would like to set an ICMP filter in a CGNAT so that pings coming from internal clients to the internet (e.g. google.com) can go through normally, but trace routes do not show the interfaces of the CGNATs yet show the rest of the route. I've managed to set the filter so that pings with the destination IP of any of the interfaces of the CGNAT get discarded; however, if I block ICMP pings in general, other services get affected and network traffic increases. While setting up the filter, I set the source address to include the whole internal client network. I just need the traceroute hops to show every hop but not the CGNAT interface. It is currently running version 11.2.