Figure 1 Networking diagram for an AR used as a gateway
Main configuration on the AR:
# acl number 3301 rule 5 deny icmp destination 184.108.40.206 0 rule 10 permit ip # interface GigabitEthernet0/0/1 traffic-filter outbound acl 3301 #
Run the traffic-filter outbound acl 3301 command on an AR interface to block ping packets with destination address 220.127.116.11. When destination address 18.104.22.168 is pinged on the AR, the ping operation succeeds but packet filtering does not take effect.