beautypg.com

Access-list extended icmp filter), Commands, Access-list extended – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 902: Icmp filter)

background image

IPv4 Software Access Control List (ACL) Commands

Software Reference for x310 Series Switches

35.16

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

(access-list extended ICMP filter)

Use this ACL filter to add a new ICMP filter entry to the current extended access-list. If the
sequence number is specified, the new filter is inserted at the specified location.
Otherwise, the new filter is added at the end of the access-list.

The no variant of this command removes an ICMP filter entry from the current extended
access-list. You can specify the ICMP filter entry for removal by entering either its sequence
number (e.g. no 10), or by entering its ICMP filter profile without specifying its sequence
number.

Note that the sequence number can be found by running the

show access-list (IPv4

Software ACLs)

command.

Syntax

[icmp]

[<sequence-number>] {deny|permit}

icmp <source> <destination>

[icmp-type <icmp-value>] [log]

no {deny|permit} icmp <source> <destination>

[icmp-type <icmp-value>] [log]

no <sequence-number>

Parameter

Description

<sequence-
number
>

<1-65535>
The sequence number for the filter entry of the selected access
control list.

deny

Access-list rejects packets that match the source and destination
filtering specified with this command.

permit

Access-list permits packets that match the source and destination
filtering specified with this command.

icmp

ICMP packet type.

<source>

The source address of the packets. You can specify a single host, a
subnet, or all sources. The following are the valid formats for
specifying the source:

<ip-addr>/
<prefix>

An IPv4 address, followed by a
forward slash, then the prefix length.
This matches any source IP address
within the specified subnet.

any

Matches any source IP address.

<destination>

The destination address of the packets. You can specify a single
host, a subnet, or all destinations. The following are the valid
formats for specifying the destination:

<ip-addr>/
<prefix>

An IPv4 address, followed by a
forward slash, then the prefix length.
This matches any destination IP
address within the specified subnet.

any

Matches any destination IP address.

icmp-type

The ICMP type.