Disable ICMP on concentrator interfaces

[enrenraku]

Please help me on this,

i have to disable the ICMP so that no one can ping both interfaces on 3000 concentrator.

how do i do this please?

Many thanks in advance,

John

[sachinraja]

hello John

did you try denying ICMP on the filter assigned on the public interface ?? On the filter rulesets, create a rule which will deny ICMP traffic... this should work out or deny ICMP on the outside router which is connected to the VPN 3000.

hope this helps.. all the best...

Raj

[enrenraku]

Thanks Raj,

I want to do it in a way that when people ping both interfaces, they do not get response.

i know PIX firewall can deny icmp on the interfaces,

i do not knwo how to do it on concetrator.

thanks again

John

[sachinraja]

John

login to the VPN box and see the filters applied on your interfaces... you can see this from configuration ->interfaces screen...

You can modify this filter to deny icmp packets hitting the interface... go to

configuration -. policy management -> trafic management -> filters -> assign rules to filter

and see the rules attached to the filter.. you can remove all icmp rules to deny icmp on that interface... or create a new rule which denies ICMP and add that onto the filter....

you can define rules from configuration -> policy management -> traffic management -> rules...

hope this helps..

Raj