Deny ping on an incoming interface

[Marcin Maciejewicz]

Is there any way to silently drop a ping request on an interface? Right now I have an ACL configured with "deny icmp any any echo" but when I ping that interface I get "Packet filtered" message. Is there any way to drop it completely?

Regards
Marcin Maciejewicz

[MHM Cisco World]

Packet filter ? Are this meaning the packet drop or not?

Also this router run zone firewall?

MHM

[Richard Burts · Accepted solution]

Try configuring no ip unreachable on the interface and let us know the results.

[paul driver]

Hello

conf t
logging discriminator PKT-FIL-MSG msg-body drops Packet filtered
logging buffered discriminator PKT-FIL-MSG informational
logging console discriminator PKT-FIL-MSG informational
logging monitor discriminator PKT-FIL-MSG informational

[Richard Burts]

There seems to be a bit of confusion about this issue. I assumed that the issue was a response message that went back to the device that originated the ping. And my response addressed that. Paul assumes that the issue was about messages appearing in the log. And his response addressed that. Perhaps the OP can clarify what issue was intended?

[Marcin Maciejewicz]

Thanks! That did the job!

[Richard Burts]

You are welcome.  I am glad that our suggestions have been helpful. Thank you for marking this question as solved. This will help other participants in the community to identify discussions which have helpful information. This community is an excellent place to ask questions and to learn about networking. I hope to see you continue to be active in the community.

[paul driver]

Hello
Just like to point out, although disabling unreachables is a good fix,it is a "catch all"  deny everything associated with it, and as ICMP  has many sub codes that rely on unreachables, by disabling it as a whole could  potentially have a negative impact on other things running on the network.