Motorola RFS6000 Reference Manual page 552

14-6 Motorola RF Switch CLI Reference Guide
deny icmp [<source-IP/
Mask>|any|host <IP>]
[<dest-IP/Mask>|any|host
<IP>] {<ICMP-type>
{<ICMP-code>}} {log}
{rule-precedence <1-
5000>}
Use with the deny command to reject ICMP packets
• deny – Rejects ICMP packets
• icmp – Specifies ICMP as the protocol
• [<source-ip/mask>|any|host <IP>] – The source <source-
IP> is the source IP address of the network or host (in
dotted decimal format). The <mask> is the network
mask. For example, 10.1.1.10/24 indicates the first 24
bits of the source IP is used for matching
• any – any is an abbreviation for a source IP of 0.0.0.0 and
source-mask bits equal to 0
• host – host is an abbreviation for exact source (A.B.C.D)
and source-mask bits equal to 32
• [<dest-IP/Mask>|any|host <IP>] – Defines the
destination host IP address or destination network
address
• <ICMP-type> {<ICMP-code>} – Sets the ICMP type value
<ICMP-type> from 0 to 255, and is valid only for ICMP.
The ICMP code value <ICMP-code> is from 0 to 255, and
is valid only for protocol type icmp
• log – Generates log messages when the packet coming
from the interface matches the ACL entry. Log messages
are generated only for router ACLs
• rule-precedence <1-5000> – Optional. Defines an integer
value between 1-5000. This value sets the rule
precedence in the ACL