How do I stop excessive pings

Unanswered Question
Jun 24th, 2002

2501 is recieving high number of pings

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
Anonymous (not verified) Mon, 06/24/2002 - 14:38

Creat an access-list to block out icmp packets

( echo & other coresponding messages)on input interfaces to your network..

That should stop the ping storms.

what you might want to consider blocking are

echo Echo (ping)

echo-reply Echo reply

host-unreachable Host unreachable

administratively-prohibited

Administratively prohibited

net-unreachable

Net unreachable

unreachable

All unreachables

Frederic Vanderbecq Tue, 06/25/2002 - 00:50

Create an IP extended access-list to block ICMP packets. Only allow pings from well-known addresses from your network.

yusuff Tue, 06/25/2002 - 03:41

creating ACL and blocking icmp will solve the issue, but also block legitimate icmp pings, which you might want to allow from random sources.

Best way to approach to control EXCESSIVE icmp flood is using Committed Access Rate (CAR). CAR allows you to enforce a bandwidth policy against network traffic that matches an access list.

URLs for CAR;

http://www.cisco.com/warp/public/63/car_rate_limit_icmp.html#first

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/qos_c/qcprt1/qcdcar.htm

HTH

R/Yusuf

Actions

Login or Register to take actions

This Discussion

Posted June 24, 2002 at 2:38 PM
Stats:
Replies:3 Avg. Rating:
Views:244 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard

Rank Username Points
1 2,069
2 1,736
3 1,675
4 1,624
5 1,529