<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: Trace and Ping with Record Option on Cisco Routers</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>That's exactly it, Crist. I did a little research and that the PIX drops any packets with IP Options turned on. Currently there is no workaround. This is IP Option 7 to be exact.</FONT></P>
<P><FONT SIZE=2>Thanks,</FONT>
<BR><FONT SIZE=2>Danny</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Crist Clark [<A HREF="mailto:crist.clark@globalstar.com">mailto:crist.clark@globalstar.com</A>] </FONT>
<BR><FONT SIZE=2>Sent: Monday, December 22, 2003 6:18 PM</FONT>
<BR><FONT SIZE=2>To: Andaluz, Danilo, Triaton/NA</FONT>
<BR><FONT SIZE=2>Cc: nanog@merit.edu</FONT>
<BR><FONT SIZE=2>Subject: Re: Trace and Ping with Record Option on Cisco Routers</FONT>
</P>
<BR>
<P><FONT SIZE=2>> Danny.Andaluz@triaton-na.com wrote:</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Hey, Group.</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> In my production network, I'm trying to do some extended traces and </FONT>
<BR><FONT SIZE=2>> pings with the record option turned on to see what route my packets </FONT>
<BR><FONT SIZE=2>> take going and returning. It's not working. If I do the extended </FONT>
<BR><FONT SIZE=2>> traceroute or ping without the record option, it works fine. There is </FONT>
<BR><FONT SIZE=2>> a firewall (PIX) a few hops in front of the destination I'm trying to </FONT>
<BR><FONT SIZE=2>> record the route for. What part of ICMP is this that needs to be </FONT>
<BR><FONT SIZE=2>> opened on the firewall to allow this to come back? First time I'm </FONT>
<BR><FONT SIZE=2>> coming across this.</FONT>
</P>
<P><FONT SIZE=2>It's not ICMP. It's the IP Options. Most firewalls will drop any packet with an IP Options. Many firewalls will not let you turn this off. I do not know how to allow IP Options through a PIX, but I know how to do it in Cisco IOS.</FONT></P>
<P><FONT SIZE=2>-- </FONT>
<BR><FONT SIZE=2>Crist J. Clark crist.clark@globalstar.com</FONT>
<BR><FONT SIZE=2>Globalstar Communications (408) 933-4387</FONT>
</P>
</BODY>
</HTML>