From: Joe Biondino (joe_biondino@hotmail.com)
Date: Fri Sep 19 2003 - 02:30:19 GMT-3
Jimmy;
so you have:
----Outside------e0(Router)e1--------Inside------
I would confiure the access list on the inside interface (e1), inbound:
access-list 100 deny icmp <inside network> <outside network> echo
access-list 100 permit ip any any
interface e1
ip access-group 100 in
This denies echo requests from inside network destined to outside... but
echo-replies will be forwarded by the permit ip any any statement.
----- Original Message -----
From: "Jimmy Wong" <jjwong2000@yahoo.com>
To: <ccielab@groupstudy.com>
Sent: Friday, September 19, 2003 2:43 PM
Subject: ACL Help!
> What will be the ACL on the router looks like if I want to deny anyone
trying
> to ping outside from LAN? (Permit ping from Outside to LAN).
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:34 GMT-3