3

What is the command to use to disable ping replies from a brocade switch? Baasically, I am trying to disable any outbound ping messages to inbound ICMP request messages. I stumbled upon brocade-broadcast-requests but this still allows the brocade switch to be pingable.

Brocade switch: NetIron CES 2024C

Software version: 5.3.0T185

  • Please consider adding more details like the type of Brocade switch you're using and the software version you're using. – Teun Vink Jun 4 '15 at 20:51
  • Are you specifically referring to the management interface, or are you referring to any routed interfaces on the device? – John Jensen Jun 4 '15 at 21:51
  • @JohnJensen, I am referring to both the management as well as other routed interfaces on the device – lordlabakdas Jun 4 '15 at 21:53
2

You would need to create an ACL to filter the ICMP traffic (edit: referring to ping here - it's generally not advisable to filter all ICMP), and apply it to the desired interfaces, including the management interface. You would specify host addresses that match your router's management interface, as well as any addresses of routed interfaces.

ip access-list 666 deny any x.x.x.x icmp echo
ip access-list 666 deny any x.x.x.x icmp echo-reply
ip access-list 666 deny any y.y.y.y icmp echo
ip access-list 666 deny any y.y.y.y icmp echo-reply
ip access-list 666 permit ip any any

Where x.x.x.x and y.y.y.y would represent your addresses that you wish to filter. Continue to add addresses as you see fit. Don't forget the explicit permit at the end. Once you have the ACL created, you would then apply it to your desired interfaces in the inbound direction.

ip access-group 666 in

ETA: the echo-reply rules may be superfluous, since one shouldn't be generated if the original echo is filtered by the ACL. I don't have a Brocade at hand to test.

| improve this answer | |
0

Consider using recieve acls. A recieve acl will get applied to all interfaces on the device, you do not need to specify individual interfaces. http://www.brocade.com/content/html/en/configuration-guide/netiron-05900-securityguide/GUID-396A52CF-1805-4C4E-BBE5-EB4673931B01.html

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.