Deny Icmp (Extended Ip Access List Configuration); Permit Icmp (Extended Ip Access List Configuration) - TRENDnet TL2-E284 User Manual

24-Port 10/100Mbps Layer 2 Switch w/ 4 Gigabit Ports and 2 Shared Mini-GBIC Slots

deny icmp (Extended IP Access List Configuration)

Command
Syntax Description
Command Modes
Example
Command History

permit icmp (Extended IP Access List Configuration)

Command
35-10
To configure a rule that packets matched will be filtered.
deny icmp {any |host <src-ip-address>|<src-ip-address> <mask>}
{any | host <dest-ip-address> | <dest-ip-address> <mask> }
{message-type <(0-255)>} {message-code <(0-255)>}
any
host
src-ip-address
src-ip-address
mask
any
host
dest-ip-address
dest-ip-address
mask
message-type
(0-255)
message-code
(0-255)
Extended IP Access List Configuration Mode
switch(config-ext-nacl)# deny icmp any any message-type 10
message-code 10
Version History
1.00.001 This command was introduced
To configure a rule that packets matched will be processed.
permit icmp {any
<mask>} {any | host <dest-ip-address> | <dest-ip-address>
<mask> } {message-type <(0-255)>} {message-code <(0-255)>}
Matching packet with any source IP address.
Matching packet with a specific source IP address.
Matching packet with a range of source IP address. For
example 172.17.5.1 with mask 255.255.255.0 means
172.15.5.0~255.
Matching packet with any destination IP address.
Matching packet with a specific destination IP address.
Matching packet with a range of destination IP address.
For example 172.17.5.1 with mask 255.255.255.0 means
172.15.5.0~255.
Matching ICMP packets with specific message type.
Matching ICMP packets with specific message code.
|host <src-ip-address>|<src-ip-address>