The ICMP type specified is not related to either source or destination
address.  It is not like a port, it is just the type of frame.  You
could ask why the syntax is not:

permit icmp echo any any

It just isn't, possibly for historical reasons, maybe just arbitrary. 
More to the point, why do cisco bundle together type and code into one
descriptor, such as the ridiculous *packet-too-big* keyword?
rgds
Marc TXK

Anthony Pace wrote:
> 
> for instance :
> 
> access-list 101 permit icmp any host 207.122.1.5 echo
> access-list 101 permit icmp host 207.122.2.3 any echo-reply
> 
> but not
> 
> access-list 101 permit icmp any echo-reply any
> 
> Anthony Pace




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42609&t=42609
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to