cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
530
Views
0
Helpful
3
Replies

How do I stop excessive pings

admin_2
Level 3
Level 3

2501 is recieving high number of pings

3 Replies 3

Not applicable

Creat an access-list to block out icmp packets

( echo & other coresponding messages)on input interfaces to your network..

That should stop the ping storms.

what you might want to consider blocking are

echo Echo (ping)

echo-reply Echo reply

host-unreachable Host unreachable

administratively-prohibited

Administratively prohibited

net-unreachable

Net unreachable

unreachable

All unreachables

Frederic Vanderbecq
Cisco Employee
Cisco Employee

Create an IP extended access-list to block ICMP packets. Only allow pings from well-known addresses from your network.

yusuff
Cisco Employee
Cisco Employee

creating ACL and blocking icmp will solve the issue, but also block legitimate icmp pings, which you might want to allow from random sources.

Best way to approach to control EXCESSIVE icmp flood is using Committed Access Rate (CAR). CAR allows you to enforce a bandwidth policy against network traffic that matches an access list.

URLs for CAR;

http://www.cisco.com/warp/public/63/car_rate_limit_icmp.html#first

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/qos_c/qcprt1/qcdcar.htm

HTH

R/Yusuf

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: