ACL: icmp echo-reply is not working for me

[hfakoor222]

Here is my topology 

I've written an ACL to limit contact from vlan 100 into 200, howver I would like ICMP originating from 200 not to time out when going to VLAN 100.

int vlan 200 on switch = 192.168.200.3

int vlan 100 on switch = 192.168.100.2 

So here is my output for ACL ~ some of the sequences are redundant as I was playing around with it but it looks like it should be receiving icmp reply and it is not

this ACL is applied on VLAN 200 out (or in I forget) with deny 192.168.100.0 255 wildcard to the 200.0 network

here is output of my PC3 in 200.0 network attempting to get an echo reply ping

I've included a 200.0 0.0.0.255 (dest) any echo-reply however it does not seem to be working

[MHM Cisco World]

first ACL line is match any traffic between the VLAN, and deny drop traffic.
remove this line or push it to the end of ACL.

[balaji.bandi · Accepted solution]

Simple ACL should work for you :

interface Vlan100
ip address 192.168.100.1 255.255.255.0
ip access-group 100 out
!
interface Vlan200
ip address 192.168.200.1 255.255.255.0
!
!
access-list 100 permit icmp 192.168.100.0 0.0.0.255 host 192.168.200.1 echo-reply
access-list 100 permit icmp 192.168.100.0 0.0.0.255 host 192.168.100.1 echo-reply
!

Above ACL source 100 vlan to 200 vlan, only allowed gateway - change based on the requirement.