- A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Re: Why does IOS only allow ICMP granularity on "destination" [7:42609] posted 04/25/2002
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]

The ICMP type specified is not related to either source or destination
address.  It is not like a port, it is just the type of frame.  You
could ask why the syntax is not:

permit icmp echo any any

It just isn't, possibly for historical reasons, maybe just arbitrary. 
More to the point, why do cisco bundle together type and code into one
descriptor, such as the ridiculous *packet-too-big* keyword?
Marc TXK

Anthony Pace wrote:
> for instance :
> access-list 101 permit icmp any host echo
> access-list 101 permit icmp host any echo-reply
> but not
> access-list 101 permit icmp any echo-reply any
> Anthony Pace

Message Posted at:
FAQ, list archives, and subscription info:
Report misconduct and Nondisclosure violations to abuse@xxxxxxxxxxxxxx