Motorola WS5100 Series, Cli Reference Manual

Page: 173 / 492

Global Configuration Commands 5-9
access-list
(<100-199>|<2000-2699>)
{deny | permit | mark
{dot1p <0-7> | tos <0-
255>}}
{
icmp }
{source/source-mask |
host source | any}
{destination/ destination-
mask | host destination |
any} [icmp-type |
[icmp-type icmp-code]]
[log]
[rule-precedence access-
list-entry precedence]
Adds an Extended IP access list entry using an icmp keyword.
• (<100-199>|<2000-2699>) – For ICMP extended ACLs,
the ACL must be between 2000-2699
• {deny | permit | mark {dot1p <0-7> | tos <0-255>}} –
Defines the action on an ACL. The action type
mark
is
functional only over a Port ACL
• { icmp } – Specifies ICMP as the protocol
• {source/source-mask | host source | any} – Source is
the source address of the network or host in dotted
decimal. Source-mask is the network mask. For
example, 10.1.1.10/24 indicates the first 24 bits of the
source IP are used for matching
• The keyword any is an abbreviation for source an IP of
0.0.0.0 and source-mask bits equal to 0
• The keyword host is an abbreviation for exact source
(A.B.C.D) and source-mask bits equal to 32
• {destination/ destination-mask | host destination |
any} – Sets the destination host IP address or
destination network address
• [icmp-type |icmp-type icmp-code] – ICMP type value
from 0 - 255. Valid only for protocol type icmp. ICMP
code value from 0 - 255. Valid only for a protocol type
of ICMP
• [log] – Generates log messages when the packet
coming from the interface matches the ACL entry. Log
messages are generated only for router ACL’s
• [rule-precedence access-list-entry precedence] –
Define an integer value between 1-5000. This value
sets the rule precedence in the ACL