chriswahl
Virtuoso
Virtuoso

so this rule drops ALL icmp EXCEPT to x.x.x.254

Correct. The ICMP packet is then dropped because of Rule 2. If you want to allow only ICMP to x.x.x.254, the rules would look like this:

Rule 1

action: permit

traffic direction: egress

protocol is icmp

source ip address any

destination is x.x.x.254

Rule 2

action: drop

tarffic direction: egress

protocol is any

source ip is any

destination ip is any

VCDX #104 (DCV, NV) ஃ WahlNetwork.com ஃ @ChrisWahl ஃ Author, Networking for VMware Administrators
Reply
0 Kudos