Cisco AP775A - Nexus Converged Network Switch 5010 Command Reference Manual page 369

Chapter 6 Security Commands
S e n d c o m m e n t s t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
The following example shows how to specify the source argument with the host keyword and the
192.168.67.132 IPv4 address:
switch(config-acl)# deny icmp host 192.168.67.132 any
• Any address—You can use the any keyword to specify that a source or destination is any IPv4
address. For examples of the use of the any keyword, see the examples in this section. Each example
shows how to specify a source or destination by using the any keyword.
ICMP Message Types
The icmp-message argument can be the ICMP message number, which is an integer from 0 to 255. It can
also be one of the following keywords:
administratively-prohibited—Administratively prohibited
•
• alternate-address—Alternate address
• conversion-error—Datagram conversion
• dod-host-prohibited—Host prohibited
dod-net-prohibited—Net prohibited
•
echo—Echo (ping)
•
echo-reply—Echo reply
•
general-parameter-problem—Parameter problem
•
host-isolated—Host isolated
•
host-precedence-unreachable—Host unreachable for precedence
•
host-redirect—Host redirect
•
host-tos-redirect—Host redirect for ToS
•
host-tos-unreachable—Host unreachable for ToS
•
host-unknown—Host unknown
•
host-unreachable—Host unreachable
•
information-reply—Information replies
•
• information-request—Information requests
• mask-reply—Mask replies
mask-request—Mask requests
•
mobile-redirect—Mobile host redirect
•
net-redirect—Network redirect
•
net-tos-redirect—Net redirect for ToS
•
net-tos-unreachable—Network unreachable for ToS
•
net-unreachable—Net unreachable
•
network-unknown—Network unknown
•
no-room-for-option—Parameter required but no room
•
option-missing—Parameter required but not present
•
packet-too-big—Fragmentation needed and DF set
•
• parameter-problem—All parameter problems
OL-16599-01
Cisco Nexus 5000 Series Command Reference
deny (IPv4)
6-21