Allied Telesis CentreCOM FS980M/9 Command Reference Manual page 816

IP 4 S A C
V OFTWARE CCESS ONTROL
( - ICMP
ACCESS LIST EXTENDED FILTER
Mode IPv4 Extended ACL Configuration
Default Any traffic controlled by a software ACL that does not explicitly match a filter is
denied.
Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the
sequence number is omitted, the next available multiple of 10 will be used as the
sequence number for the new filter. A new ACL filter can be inserted into the
middle of an existing list by specifying the appropriate sequence number.
NOTE
(extended numbered)
the required access control list number, or name - but with no further parameters
selected.
Software ACLs will deny access unless explicitly permitted by an ACL action.
To add a new entry in access-list called my-list that will reject ICMP packets from
Examples
10.0.0.1 to 192.168.1.1, use the commands:
awplus#
awplus(config)#
awplus(config-ip-ext-acl)#
Use the following commands to add a new filter at sequence number 5 position of
the access-list called my-list. The filter will accept the ICMP type 8 packets from
10.1.1.0/24 network, to 192.168.1.0 network:
awplus#
awplus(config)#
awplus(config-ip-ext-acl)#
192.168.1.0/24 icmp-type 8
613-50157-01 Rev C
L (ACL) C
IST OMMANDS
)
Parameter Description
icmp-type
The ICMP type.
<icmp-value>
The value of the ICMP
type.
log
Log the results.
: The access control list being configured is selected by running the
command or the
configure terminal
access-list extended my-list
configure terminal
access-list extended my-list
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.7-0.x
access-list extended (named)
deny icmp 10.0.0.1/32 192.168.1.1/32
5 permit icmp 10.1.1.0/24
access-list
command, with
816