Need Help In Filtering Router Self Generated Traffic

[klooi]

Hi,

Can anyone guide me how to filter router self-generated traffic? For example my router interface serial ip is 10.1.1.1 while my fastethernet ip is 20.1.1.1. I have created a n access-list blocking icmp (access-list 100 deny icmp host 10.1.1.1 any). I apply this access-list at the fastethernet outbound. When i try to ping 20.1.1.2 using source ip 10.1.1.1 it still be able to ping. Please advise.

[Richard Burts]

Kin

You are encountering a long established behavior of IOS devices. An access list applied outbound on an interface will not filter traffic generated by the router. I am not aware of any way to work around this on the router.

HTH

Rick