From: John Neiberger (neiby@ureach.com)
Date: Thu Nov 14 2002 - 19:50:02 GMT-3
It appears that you forgot about the implicit 'deny all' at the
end of the access list. You should have added a permit
statement to allow the remainder of the traffic.
John
---- On Thu, 14 Nov 2002, Jeongwoo Park (jpark@wams.com) wrote:
> Hi all.
> I like to share what I did this morning to take an internet
connection down
> for one of customers' companies.
>
> Internet_router#
>
> Interface s0
> Ip access-group 100 in
> .
> .
> .
> access-list 100 deny icmp any host 172.16.1.10 echo
>
>
> I was tring to set up access-list in a way that no one can
ping one of their
> servers in their network.
> This config took their internet connection down.
> I immediately removed it, and it came back normal.
>
> What did I wrong?
>
> Thanks,
>
> JP
This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:23:00 GMT-3