Hi all

I am trying to block "ping 10.20.30.40 data FFFF" from a router.

class-map type access-control match-any ac
 match start ICMP payload-start offset 0 size 1500 string "FFFF"
class-map type stack match-all sc
 match field IP protocol eq 1 next ICMP

policy-map type access-control ac
 class ac
   drop
policy-map type access-control st
 class sc
service-policy ac

It's simple but I am missing something. I am still able to ping.



With regards
Kings
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to