cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
406
Views
1
Helpful
7
Replies

Deny ping on an incoming interface

Is there any way to silently drop a ping request on an interface? Right now I have an ACL configured with "deny icmp any any echo" but when I ping that interface I get "Packet filtered" message. Is there any way to drop it completely?

Regards
Marcin Maciejewicz

1 Accepted Solution

Accepted Solutions

Try configuring no ip unreachable on the interface and let us know the results.

HTH

Rick

View solution in original post

7 Replies 7

Packet filter ? Are this meaning the packet drop or not?

Also this router run zone firewall?

MHM

Try configuring no ip unreachable on the interface and let us know the results.

HTH

Rick

Hello

conf t
logging discriminator PKT-FIL-MSG msg-body drops Packet filtered
logging buffered discriminator PKT-FIL-MSG informational
logging console discriminator PKT-FIL-MSG informational
logging monitor discriminator PKT-FIL-MSG informational


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

There seems to be a bit of confusion about this issue. I assumed that the issue was a response message that went back to the device that originated the ping. And my response addressed that. Paul assumes that the issue was about messages appearing in the log. And his response addressed that. Perhaps the OP can clarify what issue was intended?

HTH

Rick

Thanks! That did the job!

You are welcome.  I am glad that our suggestions have been helpful. Thank you for marking this question as solved. This will help other participants in the community to identify discussions which have helpful information. This community is an excellent place to ask questions and to learn about networking. I hope to see you continue to be active in the community.

HTH

Rick

Hello
Just like to point out, although disabling unreachables is a good fix,it is a "catch all"  deny everything associated with it, and as ICMP  has many sub codes that rely on unreachables, by disabling it as a whole could  potentially have a negative impact on other things running on the network.  


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul
Review Cisco Networking for a $25 gift card