Figure 1 Networking diagram for an AR used as a gateway
Main configuration on the AR:
# acl number 3301 rule 5 deny icmp destination 220.127.116.11 0 rule 10 permit ip # interface GigabitEthernet0/0/1 traffic-filter outbound acl 3301 #
Run the traffic-filter outbound acl 3301 command on an AR interface to block ping packets with destination address 18.104.22.168. When destination address 22.214.171.124 is pinged on the AR, the ping operation succeeds but packet filtering does not take effect.