Why I cannot access specific websites?

Zyxel_James
Posts: 788
Zyxel Employee





Scenario: There are certain websites that I cannot access, but other websites are available.
Answer: It could be ICMP TTL expired.
By default, ICSA is enabled which means the connection will terminate when ICMP is unreachable or ICMP TTL expires. So if there are too many hops, it may cause TTL to expire.
How to solve:
Disable ICSA to avoid the connection gets terminated.
Router# configure terminal
Router(config)# firewall icsa icmp-destroy-session disable
Tagged:
0
Categories
- All Categories
- 438 Beta Program
- 2.7K Nebula
- 188 Nebula Ideas
- 121 Nebula Status and Incidents
- 6.2K Security
- 456 USG FLEX H Series
- 303 Security Ideas
- 1.6K Switch
- 81 Switch Ideas
- 1.3K Wireless
- 44 Wireless Ideas
- 6.8K Consumer Product
- 279 Service & License
- 438 News and Release
- 88 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 91 Security Highlight