Link to home
Start Free TrialLog in
Avatar of dontdig
dontdig

asked on

how to block one way ping?

HI,

i want an acl that do this "i can ping nd get reply from 192.168.1.2 but 192.168.1.2 cant ping me he doesnt get reply" so i applied this on my e0/1 inbound     e0/1 ip is 192.168.1.1  
                           10 deny icmp host 192.168.1.2 host 192.168.1.1 echo-reply (9 matches
                          20 permit icmp any any echo-reply


now 192.168.1.2 cant ping 192.168.1.1 it sees destiation host unreachable but its also blocking 192.168.1.1 to ping or get reply from 192.168.1.2 this what i dont want.

when i apply outbound nothing works!!

Thanks
Avatar of Istvan Kalmar
Istvan Kalmar
Flag of Hungary image

could you show us the config?

So you want 1.1 to be able to ping 1.2 but you don't want 1.2 to be able to ping 1.1?

If so:

access-list 101 deny icmp host 192.168.1.2 host 192.168.1.1 eq echo request
access-list 101 permit ip any any
int e0/1
 ip access-group 101 in

Open in new window

Avatar of dontdig
dontdig

ASKER

sorry for delay reply

after putting eq echo    there is no option like "request" my router is version is  C7200-ADVENTERPRISEK9-M), Version 12.4(15)T9,
ASKER CERTIFIED SOLUTION
Avatar of Don Johnston
Don Johnston
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial