CANOGA PERKINS 9175 Command Reference - Manual (Page 606)

CanogaOS Command Reference
33-15
33.21 deny icmp
Use this command to reject ICMP packets matching the IP filter.
Command Syntax
[<1-2147483646>] deny icmp { source source-mask | any | host source } {destination destination-mask
any | host destination } [ icmp-type < 0-255 > [icmp-code < 0-255 >] ] [ ip-precedence precedence |
dscp dscp ] [ fragments ] [ routed-packet ] [ options ] [ time-range time-range-name ] [ stats ]
icmp-type: <0-255> ICMP message type
icmp-code: <0-255> ICMP message code
Command Mode
IP ACL configuration
Usage
None
Examples
This example shows how to create a filter in IP ACL to deny any ICMP packets.
Switch(config-ip-acl)#1 deny icmp any any
This example shows how to create a filter in IP ACL to deny the ICMP packets with the icmp-type 3 and
icmp-code 3.
Switch(config-ip-acl)#2 deny icmp any any icmp-type 3 icmp-code 3
Related Commands
deny
deny tcp
deny udp
deny igmp
33.22 deny igmp
Use this command to reject IGMP packets matching the IP filter.
Command Syntax
[<1-2147483646>] deny igmp { source source-mask | any | host source } {destination destination-mask
any | host destination} [ igmp-type ] [ ip-precedence precedence | dscp dscp ] [ fragments ]
[ routed-packet ] [ options ] [ time-range time-range-name ] [ stats ]
igmp-type: IGMP type, including dvmrp, host-query, host-report, mtrace, mtrace-response, pim,
precedence, trace, v2-leave, v2-report, v3-report
reference to command deny for other parameters
Command Mode
IP ACL configuration