I agree with Bryan.  Remember Bauke, ICMP echo and ICMP echo-reply are only
two functions of ICMP.  There are many other message types (for instance
ICMP redirect, ICMP host-unreachable, etc...) Do what the lab says --
Nothing more, nothing less : )

On Mon, Dec 21, 2009 at 10:50 PM, Bryan Bartik <[email protected]> wrote:

> Bauke,
>
> Without looking at the task, it may depend. If the task specified PING
> traffic, I would use your ACL (echo and echo-reply). If it said ICMP, then
> "permit icmp any any" would be fine.
>
>  On Mon, Dec 21, 2009 at 8:04 PM, Bauke Dzavhale <
> [email protected]> wrote:
>
>>  When using ACLs to classify ICMP traffic an ACL was created as follows:
>> access-list 110 permit icmp any any.
>>
>> For telnet the ACL was set up as follows:
>> access-list 111 permit TCP any any eq 23
>> access-list 111 permit TCP any  eq 23 any
>>
>> I understand the telnet ACL but I have a problem with icmp...
>>
>> I would build the ACL for icmp as follows:
>> access-list 110 permit icmp any any eq echo
>> access-list 110 permit icmp any any eq echo-reply
>>
>>
>> Any comments?
>>
>> Thanks B
>>
>> ------------------------------
>> The new Internet Explorer® 8 - Faster, safer, easier. Optimized for Yahoo!
>> *Get it Now for Free!* <http://downloads.yahoo.com/ca/internetexplorer/>
>>
>> _______________________________________________
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>>
>
>
> --
> Bryan Bartik
> CCIE #23707 (R&S, SP), CCNP
> Sr. Support Engineer - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>


-- 
Regards,

Joe Astorino CCIE #24347 (R&S)
Sr. Technical Instructor - IPexpert
Mailto: [email protected]
Telephone: +1.810.326.1444
Live Assistance, Please visit: www.ipexpert.com/chat
eFax: +1.810.454.0130

IPexpert is a premier provider of Classroom and Self-Study Cisco CCNA (R&S,
Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security & Service
Provider) Certification Training with locations throughout the United
States, Europe and Australia. Be sure to check out our online communities at
www.ipexpert.com/communities and our public website at www.ipexpert.com
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to