Figure 1 Networking diagram for an AR used as a gateway
Main configuration on the AR:
# acl number 3301 rule 5 deny icmp destination 18.104.22.168 0 rule 10 permit ip # interface GigabitEthernet0/0/1 traffic-filter outbound acl 3301 #
Run the traffic-filter outbound acl 3301 command on an AR interface to block ping packets with destination address 22.214.171.124. When destination address 126.96.36.199 is pinged on the AR, the ping operation succeeds but packet filtering does not take effect.