26 permit icmp – CANOGA PERKINS 9175 Command Reference User Manual

Page 610

Advertising
background image

33-19

Examples

This example shows how to create a filter in IP ACL to deny any UDP packets.

Switch(config-ip-acl)#1 permit udp any any

This example shows how to create a filter in IP ACL to deny the UDP packets with the source IP address

1.1.1.1, source port 10, and destination port less than 2000.

Switch(config-ip-acl)#2 permit udp host 1.1.1.1 src-port eq 10 any dst-port lt 2000

Related Commands

permit

permit tcp

permit icmp

permit igmp

33.26 permit icmp

Use this command to permit ICMP packets matching the IP filter.

Command Syntax

[<1-2147483646>] permit icmp { source source-mask | any | host source } {destination

destination-mask any | host destination } [ icmp-type < 0-255 > [icmp-code < 0-255 >] ]

[ ip-precedence precedence | dscp dscp ] [ fragments ] [ routed-packet ] [ options ] [ time-range

time-range-name ] [ stats ]

icmp-type: <0-255> ICMP message type

icmp-code: <0-255> ICMP message code

Command Mode

IP ACL configuration

Usage

None

Examples

This example shows how to create a filter in IP ACL to permit any ICMP packets.

Switch(config-ip-acl)#1 permit icmp any any

This example shows how to create a filter in IP ACL to permit the ICMP packets with the icmp-type 3 and

icmp-code 3.

Switch(config-ip-acl)#2 permit icmp any any icmp-type 3 icmp-code 3

Related Commands

permit

permit udp

permit tcp

permit igmp

CanogaOS Command Reference

Advertising