C613-50057-01 REV A
Command Reference for AT-IX5-28GPX High Availability, High Power Video Surveillance PoE Switch
839
AlliedWare Plus™ Operating System - Version 5.4.5-0.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
ACCESS
-
LIST
HARDWARE
ICMP
FILTER
)
(access-list hardware ICMP filter)
Overview
Use this ACL filter to add a new ICMP filter entry to the current hardware access-list.
The filter will match on any ICMP packet that has the specified source and
destination IP addresses and ICMP type. The parameter
any
may be specified if an
address does not matter and the ICMP type is an optional parameter. If a sequence
number is specified, the new filter is inserted at the specified location. Otherwise,
the new filter is added at the end of the access-list.
The
no
variant of this command removes an ICMP filter entry from the current
hardware access-list. You can specify the ICMP filter entry for removal by entering
either its sequence number (e.g.
no 10
), or by entering its ICMP filter profile
without specifying its sequence number.
Note that the sequence number can be found by running the command, the
show
access-list (IPv4 Hardware ACLs)
command.
Syntax [icmp]
[<
sequence-number
>]
{deny|permit|send-to-cpu|copy-to-cpu|copy-to-mirror} icmp
<
source
> <
destination
> [icmp <
icmp-value
>]
no {deny|permit|send-to-cpu|copy-to-cpu|copy-to-mirror} icmp
<
source
> <
destination
> [icmp <
icmp-value
>]
no <
sequence-number
>
Parameter
Description
<
sequence-
number
>
<1-65535>
The sequence number for the filter entry of the selected access
control list.
deny
Access-list rejects packets that match the source and destination
filtering specified with this command.
permit
Access-list permits packets that match the source and destination
filtering specified with this command.
send-to-cpu
Specify packets to send to the CPU.
copy-to-cpu
Specify packets to copy to the CPU.
copy-to-
mirror
Specify packets to copy to the mirror port.
icmp
ICMP packet type.