Allied Telesis x510-28GPX, Command Reference Manual

Page: 1489 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1489
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
4 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED HARDWARE
ACL: ICMP
ENTRY
)
(named hardware ACL: ICMP entry)
Overview Use this command to add a new ICMP filter entry to the current hardware
access-list. The filter will match on any ICMP packet that has the specified source
and destination IP addresses and (optionally) ICMP type. You can specify the value
any if source or destination address does not matter.
If you specify a sequence number, the switch inserts the new filter at the specified
location. Otherwise, the switch adds the new filter to the end of the access-list.
The no variant of this command removes an ICMP filter entry from the current
hardware access-list. You can specify the ICMP filter entry for removal by entering
either its sequence number (e.g.
no 100 ), or by entering its ICMP filter profile
without specifying its sequence number (e.g. no permit icmp 192.168.1.0/24 any
icmp-type 11 ).
You can find the sequence number by running the show access-list (IPv4 Hardware
ACLs) command.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
Syntax [< sequence-number >] < action > icmp < source-ip > < dest-ip >
[icmp-type < number >] [vlan < 1-4094 >]
no < sequence-number >
no < action > icmp < source-ip > < dest-ip > [icmp-type < number >]
[vlan < 1-4094 >]
Parameter Description
< sequence-

number >
The sequence number for the filter entry of the selected access
control list, in the range 1-65535. If you do not specify a
sequence number, the switch puts the entry at the end of the
ACL and assigns it the next available multiple of 10 as its
sequence number. .
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the
source and destination filtering
specified with this command.
permit
Permit packets that match the
source and destination filtering
specified with this command.
copy-to-cpu
Send a copy of matching packets
to the CPU.
copy-to-mirror
Send a copy of matching packets
to the mirror port.
Use the
mirror interface command
to configure the mirror port.