Allow icmp only specific ip address from outside

[Salman.Baig]

still all icmp traffic block outside of the network 

access-list 101 deny icmp any any echo
access-list 101 permit ip any any

interface FastEthernet0/0
ip address 192.168.2.92 255.255.255.0
ip access-group 101 in

still icmp block on wan interface any any  i need only 1 specific ip to allow ping icmp outside of the network means wan side is it possible if yes please ?

[Seb Rupik]

Hi there,

If I understand you correctly, you need to specifiy the permited host before the any any deny:

!
access-list 101 permit icmp host <specific_host> any echo
access-list 101 deny icmp any any echo
access-list 101 permit ip any any
!

cheers,

Seb.

[Jon Marshall]

Do you want to allow a host to ping from outside to the inside of your network ? 

Jon

[riyel.jr@gmail.com]

Please Try as below:

access-list 102 permit icmp host X.X.X.X any

access-list 102 permit icmp host X.X.X.X any echo-reply

access-list 102 permit icmp host X.X.X.X any echo

access-list 102 deny icmp any any

access-list 102 permit ip any any

interface fa0/0
ip access-group 102 in

Note: x.x.x.x is your specific IP