I need very urgent , how to block ICMP (ping) from outsid network to my router , cause for the last couple of days some outside network users or compititors constunt watch and ping to my router , so need icmp block from outside network to my router.
but i need we are able to access ping to outside network from my router.
It's very urgent needed, please.
Thanks in ADV,
I would suggest to use CAR for this
A) CAR with ACL to limit ICMP requests
access-list 111 permit icmp any any echo-request
rate-limit input access-group 111 80000 10000 20000 conform-action transmit exceed-action drop
this will accept up to 80 kbps of ICMP requests coming from outside, no limitations on icmp replies received from outside no limitations on other traffic.
or you could use an extended ACL but in this case you can only deny all received ICMP requests
access-list 121 deny icmp any any echo-request
access-list 121permit ip any any
ip access-group 121 in
I have implemented A) CAR some years ago for a customer
Hope to help