Allow one computer to ping all other , but not the other way around on packet tracer

[Shayn]

Hello.

I have a project on packet tracer where I need to do these things :

Servers IP = static , computers = DHCP

"direction" and "secretaire" can access to internet (with a nat)

"secretaire" and "direction" can communicate with each other.

"administrateur" can connect through ssh to "switchcoeur" and "routeurversinternnet" , he can also ping everywhere.

Other users can't communicate outside their vlans

Everyone can acces to "copieur" and to the servers.

I don't have any problem , except for the part where "administrateur" can ping everyone.

If "administrateur" can ping anyone , it also means everyone can ping him.

If I don't allow others to ping "administrateur" , then when , but they're not allowed to come back.

Is there a way that if "administrateur" makes the request , the packets are sent and retrieved , but if someone else tries to ping "administrateur" , the packets gets blocked by the access list ? 

I guess an extended access list will be requiered , but I don't really know how to do that.

Thanks in advance !

[Deepak Kumar · Accepted solution]

HI,

What is your requirement? Do you want to block the only ping from location A to all but reverse wants to block?

I think you need to block only "ICMP Request" from all locations to location A and add allow all at the end of the access-list.

ip access-list extended ICMP block

deny icmp any 172.18.0.0 0.0.255.255 echo

permit icmp any any

If it does not work then share your topology attached.

[Shayn]

It did work indeed , I just had to change the address according to my own network , and now it's working just as needed.

Many thanks for your help !