Why did Ping still work?

[JoshGarmonCiscoCCNA]

I created a Named Access List...Extended...denying icmp echos from any to any

I then permited ip any any

Well everything behind, in front of, etc...of that router was still able to be Pinged.

How come?

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

Most likely, there's an error in your config, although IOS can have bugs.

It would be helpful, for a question like yours, for you to post your config and describe the platform and IOS being used.

[JoshGarmonCiscoCCNA]

Hey Joseph

Well it's in Packet Tracer.

Router is a 1941

show version says Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M4

150.4.0.0 /16 network -----------------Router1--------------192.168.9.0 /30--------------Router2------bunch of other routers

Router1#conf t

                  ip access-list extended block_ping

                  deny icmp any any echo

                  permit ip any any

Everyone could still ping everything connected to Router1

[Jon Marshall]

What interface did you apply the acl to ?

What direction did you apply it in ?

Where are you pinging from and what are you pinging ?

As Joe says the more info you can supply the easier it is for us to answer.

Jon

[JoshGarmonCiscoCCNA]

i applied the list to Router1's Serial interface which is connected to Router2

INBOUND

I have EIGRP running so everyone knows about everybody and I'm pinging from Everywhere to all PC hosts behind Router1 in the 150.4.0.0 /16 net and Router1's 192.168.9.1 /30 address.

[Jon Marshall · Accepted solution]

That should have stopped pings to the 150.4.x.x IPs from R2 or anything beyond that.

It wouldn't stop you pinging from the 150.4.x.x IPs to anything beyond R1 though ie. R2 or the other routers. 

Jon