Network Tip No. 36: ACL on ICMP

Some are having some problems on the ICMP access-list. Try this one

allow pings into the network
   access-list 110 permit icmp any any echo
   ! allow ping responses
   access-list 110 permit icmp any any echo-reply
   ! allow ICMP source-quench
   access-list 110 permit icmp any any source-quench
   ! allow path MTU discovery
   access-list 110 permit icmp any any packet-too-big
   ! allow time-exceeded, which is useful for traceroute
   access-list 110 permit icmp any any time-exceeded
   ! deny all other ICMP packets
   access-list 110 deny icmp any any