I don't want ANY reply given when I do an "deny icmp any any"

[thomasdzubin]

I have an access list with "deny icmp any any" in it and I apply it to my external interface. When I PING the Interface, although I don't get a ICMP ECHO back, I do get a "Destination Net Unreachable" ICMP message back which I don't want either. I just want the interface to not reply AT ALL to PINGs... is there a way to do this?

[Kevin Dorrell · Accepted solution]

no ip unreachables

http://www.cisco.com/en/US/docs/ios/ipapp/command/reference/iap_i2.html#wp1013671

Kevin Dorrell

Luxembourg

[thomasdzubin]

Thanks... that's EXACTLY what I needed.