Here provides an example. If you want to prevent any source IP address from pinging the IP address 9.9.9.9, see the following configuration file:


acl 3000
rule 2 deny icmp source any destination 9.9.9.9 0
rule 3 permit ip


traffic classifier c1 operator or
if-match acl 3000


traffic behavior b1


traffic policy t1
classifier c1 behavior b1


interface GigabitEthernet1/0/1
ip address 10.1.1.1 255.255.255.252
traffic-policy t1 inbound

good

Thanks

helpful note

helpful note

Helpful note

good info