GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
Re: Why does IOS only allow ICMP granularity on "destination" [7:42609] posted 04/25/2002
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


The ICMP type specified is not related to either source or destination
address.  It is not like a port, it is just the type of frame.  You
could ask why the syntax is not:

permit icmp echo any any

It just isn't, possibly for historical reasons, maybe just arbitrary. 
More to the point, why do cisco bundle together type and code into one
descriptor, such as the ridiculous *packet-too-big* keyword?
rgds
Marc TXK

Anthony Pace wrote:
> 
> for instance :
> 
> access-list 101 permit icmp any host 207.122.1.5 echo
> access-list 101 permit icmp host 207.122.2.3 any echo-reply
> 
> but not
> 
> access-list 101 permit icmp any echo-reply any
> 
> Anthony Pace




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=42609&t=42609
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to abuse@xxxxxxxxxxxxxx