Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

How do I stop excessive pings

2501 is recieving high number of pings

3 REPLIES
Anonymous
N/A

Re: How do I stop excessive pings

Creat an access-list to block out icmp packets

( echo & other coresponding messages)on input interfaces to your network..

That should stop the ping storms.

what you might want to consider blocking are

echo Echo (ping)

echo-reply Echo reply

host-unreachable Host unreachable

administratively-prohibited

Administratively prohibited

net-unreachable

Net unreachable

unreachable

All unreachables

Cisco Employee

Re: How do I stop excessive pings

Create an IP extended access-list to block ICMP packets. Only allow pings from well-known addresses from your network.

Cisco Employee

Re: How do I stop excessive pings

creating ACL and blocking icmp will solve the issue, but also block legitimate icmp pings, which you might want to allow from random sources.

Best way to approach to control EXCESSIVE icmp flood is using Committed Access Rate (CAR). CAR allows you to enforce a bandwidth policy against network traffic that matches an access list.

URLs for CAR;

http://www.cisco.com/warp/public/63/car_rate_limit_icmp.html#first

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/qos_c/qcprt1/qcdcar.htm

HTH

R/Yusuf

256
Views
0
Helpful
3
Replies