What i am trying to do is, people in my network are doing continuous ping to destination with ping x.x.x -t -l (size)

and that causes high utilization over my internet links

i cant stop them, because they think its best way to check network health if there youtube is loading slow .

i dont want to disable icmp all together since its handy to find out of remote host is down.

what are my options in this case?

Hi,

your best option is a QoS classification like what Dan wrote for you, in the proper direction on the interface.

that way you have the flexiblity to match packets with the criterias u need, you could use match protocol icmp to make all ICMP packets to be policed or you can write access lists to selectively define who is eligible and who is not, to send large packets. match access-group [access-list]

also for the packet lengh, Dan chose 1500 bytes, you can choose ur desired size.

or you can limit the bandwith for ICMP use. using the police rate [32 kbps] to limit the bandwith for ping instead of packet size (it goes under the policy-map).

CheerZ.

plz Rate if it helped.

Soroush.

No problem, more than happy to help!

as was told here I did limit all icmp traffic to reserve bandwidth for usefull aplications.

so nobody can disturb network by icmp

class-map match-any Cl_ICMP

match protocol icmp

class-map match-all voice

match protocol rtp

policy-map pm1

class c1

  priority 50

  set precedence 3

class c2

  priority 256

  set precedence 3

class c3

  priority 480

  set precedence 3

class Cl_ICMP

  shape average 30000                          - here is icmp limited to 30 kbps

class voice

  priority 500

  set precedence 5

class class-default

policy-map pm2                                   -- this policy is applyed to int

class class-default

  shape average 2000000

  service-policy pm1