C613-50170-01 Rev B
Command Reference for x510 Series
1567
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 H
ARDWARE
A
CCESS
C
ONTROL
L
IST
(ACL) C
OMMANDS
(
NAMED
IP
V
6
HARDWARE
ACL: ICMP
ENTRY
)
(named IPv6 hardware ACL: ICMP entry)
Overview
Use this command to add a new ICMP filter entry to the current IPv6 hardware
access-list. The filter will match on any ICMP packet that has the specified IPv6
source and destination IP addresses and (optionally) ICMP type. You can specify
the value
any
if source or destination address does not matter.
The
no
variant of this command removes a filter entry from the current IPv6
hardware access-list. You can specify the filter entry for removal by entering either
its sequence number (e.g.
no 100
), or by entering its filter profile without
specifying its sequence number (e.g.
no deny icmp 2001:0db8::0/64 any
).
You can find the sequence number by running the
Hardware ACLs will
permit
access unless
explicitly denied
by an ACL action.
Syntax
[<
sequence-number
>] <
action
> icmp <
source-addr
> <
dest-addr
>
[icmp-type <
number
>] [vlan <
1-4094
>]
no <
sequence-number
>
no <
action
> icmp <
source-addr
> <
dest-addr
> [icmp-type <
number
>]
[vlan <
1-4094
>]
Parameter
Description
<
sequence-
number
>
The sequence number for the filter entry of the selected access
control list, in the range 1-65535.
<action>
The action that the switch will take on matching packets:
deny
Reject packets that match the
source and destination filtering
specified with this command.
permit
Permit packets that match the
source and destination filtering
specified with this command.
copy-to-cpu
Send a copy of matching packets
to the CPU.
copy-to-mirror
Send a copy of matching packets
to the mirror port.
Use the
command
to configure the mirror port.
send-to-mirror
Send matching packets to the
mirror port.
Use the
command
to configure the mirror port.