I just created one ACL as below for blocking ICMP except host 10.10.1.1. But that host still can't ping this interface or other hosts behind after I applied the ACL to the interface. Don't know why? I know this is a silly question:(
access-list 110 deny icmp any any
access-list 110 permit ip any any
access-list 110 permit icmp host 10.10.1.1 any
access-list 110 permit icmp host 10.10.1.1 any echo-reply
access-list 110 permit icmp host 10.10.1.1 any echo
interface Ethernet1/0
ip address 10.10.1.2 255.255.255.0
ip access-group 110 in
