Egress Outbound filter

[kmcge004]

I am trying to apply egress filtering outbound in the External network. I was told the Internal network can ping over to the External network but the External network cannot ping to the Internal network. Im so confused with egress filtering. Im trying to configure the 2811 router and this how I configure the router:

access-list 101 deny icmp host 10.10.10.10 any echo-reply

access-list 101 permit ip any any

int fa0/0

ip access-group 101 out

end

Can someone point me to the right direction please? 

[mikael.lahtela]

Hi,

On the interface you have inbound and outbound filter.
fa0/0 - traffic from router interface = outbound filter ->
fa0/0 <- traffic to router interface = inbound filter -

So traffic is filtered on the interface depending if the traffic is on its way our from the interface or in on the interface.
Note that your access list is denying echo-reply and not the echo packet.
Hope that helps you forward, trying to nudge you in right direction without solving your problem.

br, Micke