restricting ICMP--echo reply once for 5 or 10 echos

[jimmyjoseph]

Hi,

I want to restrict ICMP flooding on an interface ..the way i want to do this is

who ever trying to send continuous ICMP requests to an interface will get reply for the first two hits..all the remaining packets should be dropped.

Is there a way to do this on a router interface?

regards,

jimmy.

[sphillip]

Hi Jimmy,

one way of doing this although it may not meet your specific requirement is touse Commited Access Rate (CAR) to rate limit incoming ICMP traffic to a certain rate. Refer to <http://www.cisco.com/warp/public/63/car_rate_limit_icmp.html> for more details

stevep@cisco.com