Packet Filters > Icmp - Multitech RouteFinder RF850 User Manual

Packet Filters > ICMP
ICMP (Internet Control Message Protocol) is necessary to test network connections and to test functionality of
your firewall. It is also used for diagnostic purposes.
ICMP-forwarding and ICMP-on-firewall always apply to all IP addresses ("Any"). When these are enabled, all
IPs can ping the firewall (ICMP-on-firewall) or the network behind it (ICMP-forwarding). Separate IP addresses
can then no longer be ruled out with packet filter rules. If the ICMP settings are disabled, separate IPs and
networks can be allowed to send ICMP packets through the firewall by using appropriate packet filter rules.
Firewall Options When Load Balancing Is Enabled
ICMP Forwarding
Check the ICMP Forward checkbox to enable the forwarding of ICMP packets through the
RouteFinder into the local network and all connected DMZs. In this way you select whether an
ICMP packet should be dropped or passed through to the local network and all connected
If ICMP forward is enabled, ICMP packets go through all connected networks. Another use of ICMP
forwarding is to allow ICMP packets to be forwarded to individual networks (set in Packet Filter >
Rules). For this, ICMP forward in Packet Filter > ICMP must be disabled.
The status is activated by clicking the Save button.
ICMP on Firewall
Check the options you want enabled to send and receive ICMP packets directly by the RouteFinder.
Then click the Save button.
Note: To be able to use the tools Trace Route and Ping, the function ICMP on firewall must be
enabled. After a successful startup of the RouteFinder, it is recommended that you disable this rule
so that the RouteFinder cannot be pinged anymore.
Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E)
Chapter 6 – RouteFinder Software
Packet Filters > ICMP
DMZs.
110