Dropping ICMP packets

[richw1234]

Hi there, when I ping my router I get a 'destination net unreachable'. I would like it to respond with a 'request timed out'. I have this is my config.

interface Ethernet0
description *** Admin LAN ***
ip address 172.31.0.144 255.255.255.0
ip access-group 100 in
ip nat outside
half-duplex
no cdp enable

access-list 1 permit 172.20.0.0 0.0.255.255
access-list 100 deny icmp any any
access-list 100 deny icmp any any echo-reply

Can anyone suggest what i am missing for this to happen?

 

[KiscoKid]

Add the 'no ip unreachables' command to your interface, i.e.

interface Ethernet0
description *** Admin LAN ***
ip address 172.31.0.144 255.255.255.0
ip access-group 100 in
ip nat outside
half-duplex
no cdp enable
no ip unreachables

This will stop ICMP unreachables being sent back to clients on the 172.31.0.0 network.

 

[richw1234]

Arrgh! Nice one, thank you very much, it worked a treat