ASA 5505 Problem ACL

[necs_aitany]

Dear All,

I have a problem with the configuration of the ACL of my ASA 5505 router.

However, the syntax seems okay

access-list 121 extended deny icmp 192.168.0.0 255.255.255.0 any

Thanks for your help

[Jouni Forss]

Hi,

Could you clarify a bit more.

What exactly is the problem? What are you trying to do and what is not working?

- Jouni

[necs_aitany]

Hi,

After configuring the router, I like to focus on configuring ACLs.

To test my ACL I wanted to block the ping on the network, however it did not work.

PCs on the network can still do PING

Aï-Tany

[Jouni Forss]

Hi,

Its hard to say when I cant see your whole configuration.

Have you attached the ACL to an interface on the ASA?

access-group 102 in interface

Only then the ACL will have some effect on the traffic. Though remember to allow other traffic in the SAME ACL. Otherwise you will block all traffic from behind the interface to which you attach this ACL.

However this ACL wont block ICMP between the hosts on the same network naturally.

- Jouni