[cisco-nas] Any one put the filter in for nachi-worm on a 5300 yet ?

[Wayne]

I have been adding filter for nachi ICMP pings but I'm not sure how it will
work on my 5350 because it won't do CEF .
If anyone has set it up can you post it ? This is what I have been doing.

ip cef

access-list 199 permit icmp any any echo

access-list 199 permit icmp any any echo-reply

route-map nachi-worm permit 10

match ip address 199

match length 106 106

set interface Null0







interface s1/0

no ip unreachables

ip route-cache policy

no ip mroute-cache

ip policy route-map nachi-worm

load-interval 30

Thanks

Wayne