[cisco-nas] Any one put the filter in for nachi-worm on a 5300 yet ?

Wayne wayne at hamilton.net
Mon Sep 22 17:31:50 EDT 2003


I have been adding filter for nachi ICMP pings but I'm not sure how it will
work on my 5350 because it won't do CEF .
If anyone has set it up can you post it ? This is what I have been doing.

ip cef

access-list 199 permit icmp any any echo

access-list 199 permit icmp any any echo-reply

route-map nachi-worm permit 10

match ip address 199

match length 106 106

set interface Null0







interface s1/0

no ip unreachables

ip route-cache policy

no ip mroute-cache

ip policy route-map nachi-worm

load-interval 30

Thanks

Wayne





More information about the cisco-nas mailing list