취소
다음에 대한 결과 표시 
다음에 대한 검색 
다음을 의미합니까? 
cancel
369
VIEWS
2
Helpful
5
답글

Block ICMP without ACL or Firewall

cnsa
Level 1
Level 1

I need to configure my router so that no PCs in the 192.168.0.0/24 range can send pings (ICMP) to any device, and no devices can send pings (ICMP) to the 192.168.0.0/24 range, but I want to do this without using ACLs or firewalls.
Does anyone know how to do this?

1 채택된 솔루션

채택된 솔루션

I want to do this without using ACLs or firewalls <<- this not usual but it can be done 
first do 
ip access-list extended ICMP

permit icmp any any

!
route-map ICMP permit 10

match ip address ICMP 
set ip next-hop null0

!
interface x
policy route-map ICMP 

this make any traffic match icmp send to null0 i.e. drop 

MHM

원본 게시물의 솔루션 보기

5 응답 5

I want to do this without using ACLs or firewalls <<- this not usual but it can be done 
first do 
ip access-list extended ICMP

permit icmp any any

!
route-map ICMP permit 10

match ip address ICMP 
set ip next-hop null0

!
interface x
policy route-map ICMP 

this make any traffic match icmp send to null0 i.e. drop 

MHM

I don't think it works on 2911, maybe there's another way? I'm testing it in packet tracer right now.

Sure it work in 2911 real device 

But for PKT I don't think it support PBR 

MHM

Leo Laohoo
Hall of Fame
Hall of Fame

Do not route the 192.168.0.0/24 network.

Only ICMP needs to be blocked.

빠른 링크