Access Control List Configuration
167
Procedure
To create an ICMP access control list entry that
permits access
Mode
Profile access control list
Command Purpose
Step 1
node
(pf-acl)[
name
]#permit icmp
{
src
src-
wildcard
|
any
|
host
src
} {
dest
dest-wildcard
|
any
|
host
dest
} [msg
name
|
type
type
|
type
type
code
code
] [
cos
group
]
Creates an ICMP access of control
list entry that permits access
defined according to the command
options
Procedure
To create an ICMP access control list entry that
denies access
Mode
Profile access control list
Command Purpose
Step 1
node
(pf-acl)[
name
]#deny icmp
{
src
src-wildcard
|
any
|
host
src
} {
dest
dest-wildcard
|
any
|
host
dest
} [msg
name
|
type
type
|
type
type
code
code
] [
cos
group
]
Creates an ICMP access of control
list entry that denies access
defined according to the command
options
Where the syntax is as following:
Keyword
Meaning
src
The source address to be included in the rule. An IP address in dotted-decimal-
format, e.g. 64.231.1.10.
src-wildcard
A wildcard for the source address. Expressed in dotted-decimal format this value
specifies which bits are significant for matching. One-bits in the wildcard indicate
that the corresponding bits are ignored. An example for a valid wildcard is
0.0.0.255, which specifies a class C network.
any
Indicates that IP traffic to or from all IP addresses is to be included in the rule.
host
src
The address of a single source host.
dest
The destination address to be included in the rule. An IP address in dotted-
decimal-format, e.g. 64.231.1.10
dest-wildcard A wildcard for the destination address. See
src-wildcard
.
host
dest
The address of a single destination host.
Software Configuration Guide, Revision 1.03
Summary of Contents for SmartWare R2.00
Page 2: ......