cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
792
Views
5
Helpful
4
Replies

ERROR: access-list has icmp type selector

Ahmed Al jawad
Beginner
Beginner

Hi all

im trying to apply access list to crypto map . and when i apply it its giving me the error

ERROR: access-list has icmp type selector

any idea please . thanks all

1 Accepted Solution

Accepted Solutions

The crypto-acl should be of permit IP type. You shouldn't specify protocols, like ICMP, tcp, etc.

So your proxy-acl should looks smth like this:

access-list PROXY_ACL permit IP x.x.x.x 255.255.255.9 y.y.y.y 255.255.255.0

but not this:

access-list PROXY_ACL permit icmp host x.x.x.x host y.y.y.y eq echo

View solution in original post

4 Replies 4

Eduardo Aliaga
Enthusiast
Enthusiast

Please elaborate the question. What device (router or ASA) are you talking about and what version? could you show us the exact commands you applied when you got the error ?

The crypto-acl should be of permit IP type. You shouldn't specify protocols, like ICMP, tcp, etc.

So your proxy-acl should looks smth like this:

access-list PROXY_ACL permit IP x.x.x.x 255.255.255.9 y.y.y.y 255.255.255.0

but not this:

access-list PROXY_ACL permit icmp host x.x.x.x host y.y.y.y eq echo

thanks Andrew . this is great help . still have problem the phase 2 tunnel is dropping on some networks . i will start new discussion for it . thanks agine

Shaoqin Li
Participant
Participant

Andrew is correct

Sent from Cisco Technical Support iPhone App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers