Wireless Access

Reply

Block Traceroute and allow ICMP

hi,

i need to block traceroute to the local ressources , and in the same time in need to allow ping to foreing server any idea

Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]

Re: Block Traceroute and allow ICMP

See if this helps you:

http://community.arubanetworks.com/t5/Community-Tribal-Knowledge-Base/ICMP-Type-and-Code-Filtering/ta-p/16211

 

2014-12-06 18_13_27-ICMP Packet Filtering v1.2.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA

Re: Block Traceroute and allow ICMP

yrs it was

thank you

Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]

Re: Block Traceroute and allow ICMP

how extended ACL works ??

Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]
Aruba Employee

Re: Block Traceroute and allow ICMP

Can this be done on Instant?

 

Guru Elite

Re: Block Traceroute and allow ICMP

No, because you cannot block ICMP by type on instant.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Highlighted
Aruba Employee

Re: Block Traceroute and allow ICMP

Thanks Colin,

 

To block traceroute I've added a deny udp 33434-33534 rule and it appears to work fine.

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: