Blocking incoming ping

[john.carter]

How do I block incoming pings to a router interface? I can not find a port # for ICMP

[DALE FRANCIS]

I have used named access-lists you can use Numbered if you have older IOS version.

ip access-list extended ICMP

deny icmp any any (replace with host/subnet entry)

Then apply to interface

int fast 2/1

ip access-group ICMP in

ip directed-broadcast

ip pim sparse-dense-mode

no ip mroute-cache

udld enable

[joaopedro]

You can create an ACL that blocks icmp (deny icmp) or if you want to use a port number, you have to disable the "echo" replies (udp port 7).