From: Ahmed Al-Ghawas (ghawas@batelco.com.bh)
Date: Thu Nov 14 2002 - 19:36:04 GMT-3
You forgot to add a permit statement
Interface s0
Ip access-group 100 in
.
.
.
access-list 100 deny icmp any host 172.16.1.10 echo
access-list 100 permit any any
HTH
Ahmed Al-Ghawas
CCIE 10667
----- Original Message -----
From: "Jeongwoo Park" <jpark@wams.com>
To: <ccielab@groupstudy.com>
Sent: Friday, November 15, 2002 1:02 AM
Subject: Took network down with wrong access-list
> Hi all.
> I like to share what I did this morning to take an internet connection
down
> for one of customers' companies.
>
> Internet_router#
>
> Interface s0
> Ip access-group 100 in
> .
> .
> .
> access-list 100 deny icmp any host 172.16.1.10 echo
>
>
> I was tring to set up access-list in a way that no one can ping one of
their
> servers in their network.
> This config took their internet connection down.
> I immediately removed it, and it came back normal.
>
> What did I wrong?
>
> Thanks,
>
> JP
This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:23:00 GMT-3