Cisco Nexus 5500 Series Command Reference Manual page 57

Chapter D Commands
Address and network wildcard—You can use an IPv4 address followed by a network wildcard to
•
specify a host or a network as a source or destination. The syntax is as follows:
IPv4-address network-wildcard
This example shows how to specify the source argument with the IPv4 address and network wildcard
for the 192.168.67.0 subnet:
switch(config-acl)# deny icmp 192.168.67.0 0.0.0.255 any
• Address and variable-length subnet mask—You can use an IPv4 address followed by a
variable-length subnet mask (VLSM) to specify a host or a network as a source or destination. The
syntax is as follows:
IPv4-address/prefix-len
This example shows how to specify the source argument with the IPv4 address and VLSM for the
192.168.67.0 subnet:
switch(config-acl)# deny icmp 192.168.67.0/24 any
Host address—You can use the host keyword and an IPv4 address to specify a host as a source or
•
destination. The syntax is as follows:
host IPv4-address
This syntax is equivalent to IPv4-address/32 and IPv4-address 0.0.0.0.
This example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# deny icmp host 192.168.67.132 any
Any address—You can use the any keyword to specify that a source or destination is any IPv4
•
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
ICMP Message Types
The icmp-message argument can be the ICMP message number, which is an integer from 0 to 255. It can
also be one of the following keywords:
administratively-prohibited—Administratively prohibited
•
alternate-address—Alternate address
•
conversion-error—Datagram conversion
•
dod-host-prohibited—Host prohibited
•
dod-net-prohibited—Net prohibited
•
echo—Echo (ping)
•
echo-reply—Echo reply
•
general-parameter-problem—Parameter problem
•
• host-isolated—Host isolated
• host-precedence-unreachable—Host unreachable for precedence
• host-redirect—Host redirect
host-tos-redirect—Host redirect for ToS
•
host-tos-unreachable—Host unreachable for ToS
•
OL-27883-02
Cisco Nexus 5500 Series NX-OS Security Command Reference
deny icmp (IPv4)
43