Dell Networking 2024 Reference Manual page 501

Hide thumbs Also See for Networking 2024:
Table of Contents

Advertisement

Urg – Urgent bit
icmp-type [icmp-code icmp-code ] | icmp-message icmp-
[icmp-type
message ]—Specifies a match condition for ICMP packets.
When icmp-type is specified, IP ACL rule matches on the specified
ICMP message type, a number from 0 to 255.
When icmp-code is specified, IP ACL rule matches on the specified
ICMP message code, a number from 0 to 255.
Specifying icmp-message implies both icmp-type and icmp-code are
specified.
ICMP message is decoded into corresponding ICMP type and ICMP
code within that ICMP type. This option is visible only if the protocol
is "icmpv6".
ICMPv6 message types: destination-unreachable echo-reply echo-
request header hop-limit mld-query mld-reduction mld-report nd-na
nd-ns next-header no-admin no-route packet-too-big port-
unreachable router-solicitation router-advertisement router-
renumbering time-exceeded unreachable
The icmpv6 message types are available only if the protocol is icmpv6.
fragments—Specifies the rule matches packets that are non-initial
fragments (fragment bit asserted). Not valid for rules that match L4
information such as TCP port number since that information is carried in
the initial packet. IPv6 fragments contain an IPv6 Fragment extension
header.
routing—Specifies that IP ACL rule matches on routed packets. Routed
packets contain an IPv6 "routing" extension header.
log—Specifies that this rule is to be logged.
time-range-name —Allows imposing time limitation on the
time-range
ACL rule as defined by the parameter time-range-name. If a time range
with the specified name does not exist and the ACL containing this ACL
rule is applied to an interface or bound to a VLAN, then the ACL rule is
applied immediately. If a time range with specified name exists and the
ACL containing this ACL rule is applied to an interface or bound to a
VLAN, then the ACL rule is applied when the time-range with specified
name becomes active. The ACL rule is removed when the time-range with
specified name becomes inactive.
IPv6 Access List Commands
501

Advertisement

Table of Contents
loading

Table of Contents