hello everyone i'm junell
i'm currently studying access list right now doing exercises on packet tracer. i have made two vlans (vlan10 & vlan20). the policy is vlan10 should not ping vlan20 but vlan20 can ping van10.
what hapened isĀ
if i configure vlan10 unabe to acces vlan20 which is right. the problem is vlan20 will also now not able to connect vlan10 in return
Software/Hardware used:
packet tracer
ASKED:
August 26, 2011 12:50 PM
UPDATED:
March 31, 2012 5:33 PM
You don’t write anything about your hardware – but whatever it is, you’ll need to configure some kind of “stateful” ICMP filtering (quotation marks are there because ICMP is a stateless protocol
))
Just an idea how it can work:
vlan10: allow incoming and block outgoing echo requests;
block incoming and allow outgoing echo replies;
vlan20: probably, allow all echo requests/replies