Create an extended acl that only allows icmp echo-reply's in and denies
echo-requests.
ie
access-list 110 permit icmp any any eq echo-reply
access-list 110 deny icmp any any eq echo
access-list 110 permit ip any any
I believe that the syntax is correct, but I don't have any documentation or
a router in front of me right now.
Regards,
Aaron K. Dixon
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
SH Wesson
Sent: Friday, July 21, 2000 10:33 PM
To: [EMAIL PROTECTED]
Subject: Access List ping
I want to create an access list such that a user can ping out and get a
response, but at the same time to be able to not have anyone to ping in. I
tried an access list denying icmp for IN on that interface, but that totally
stops the pings from going out or in. Any assistance on how I can get this
accomplish would be greatly appreciated. Thankx.
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
