Bauke,

Without looking at the task, it may depend. If the task specified PING
traffic, I would use your ACL (echo and echo-reply). If it said ICMP, then
"permit icmp any any" would be fine.

On Mon, Dec 21, 2009 at 8:04 PM, Bauke Dzavhale <
[email protected]> wrote:

> When using ACLs to classify ICMP traffic an ACL was created as follows:
> access-list 110 permit icmp any any.
>
> For telnet the ACL was set up as follows:
> access-list 111 permit TCP any any eq 23
> access-list 111 permit TCP any  eq 23 any
>
> I understand the telnet ACL but I have a problem with icmp...
>
> I would build the ACL for icmp as follows:
> access-list 110 permit icmp any any eq echo
> access-list 110 permit icmp any any eq echo-reply
>
>
> Any comments?
>
> Thanks B
>
> ------------------------------
> The new Internet Explorer® 8 - Faster, safer, easier. Optimized for Yahoo!
> *Get it Now for Free!* <http://downloads.yahoo.com/ca/internetexplorer/>
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
>


-- 
Bryan Bartik
CCIE #23707 (R&S, SP), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to