Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

icmp ,snmp

Posted on 2009-04-01
2
Medium Priority
?
791 Views
Last Modified: 2012-05-06
Hi,

Can any one explain me the ports numbers used for icmp both for echo request and reply

Any standard piece of code for blocking echo request and echo reply ;please help with the code for both router and pix;

Please help with the port for snmp also

thx
0
Comment
Question by:phoenix26
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 2000 total points
ID: 24048858
Here is a good reference for ICMP type messages:

http://www.iana.org/assignments/icmp-parameters

To block ICMP echo and echo reply (inbound I assume):

Router:

access-list 150 deny icmp any any echo
access-list 150 deny icmp any any echo-reply
access-list 150 permit ip any any    <--add if you are allowing everything by default

int <wan interface>
ip access-group 150 in

PIX:

access-list outside_access_in extended deny icmp any any echo
access-list outside_access_in extended deny icmp any any echo-reply
access-group outside_access_in in interface outside


SNMP polling uses UDP 161
SNMP Traps use UDP 162
0
 

Author Closing Comment

by:phoenix26
ID: 31565653
Excellent feedback Thanks a lot
0

Featured Post

Looking for a new Web Host?

Lunarpages' assortment of hosting products and solutions ensure a perfect fit for anyone looking to get their vision or products to market. Our award winning customer support and 30-day money back guarantee show the pride we take in being the industry's premier MSP.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question