ACL: Does "permit IP" allow ICMP traffic like pings?

Jan 04, 2007 3 Replies

I've found conflicting articles on the subject with some saying that if you "permit IP" it will allow ICMP through and others saying that you would also need a "permit ICMP"


  1. Does anyone know the definitive answer?
  2. Does anyone have a link to a cisco page that answers it?

Thanks for your help!


-chartscharts



ICMP is an IP protocol, so yes, permiting IP will also allow ICMP and anything else that sits on top of IP to pass.

on router yes but on pix ... I am not so sure

Yes, on the PIX as well, "permit ip" permits icmp along with all other ip protocols.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required