Create Access-List Icmp Destination Source - Extreme Networks ExtremeWare Command Reference Manual

create access-list icmp destination source

create access-list <name> icmp destination [<dest_ipaddress>/<mask> | any]
source [<src_ipaddress>/<source_mask> | any] type <icmp_type> code
<icmp_code> [permit | deny] {<portlist>} {precedence <number>}
Description
Creates a named IP access list that applies to ICMP traffic.
NOTE
This command is available only on the "i" series switches. To create an access list for an "e" series
switch, use the
Syntax Description
name
dest_ipaddress/mask
src_ipaddress/source_mask
icmp_type
icmp_code
permit
deny
portlist
number
Default
N/A
Usage Guidelines
The access list is applied to all ICMP ingress packets.
Example
This command creates an access list named denyping that filters out ping (ICMP echo) packets. ICMP
echo packets are defined as type 8 code 0:
create access-list denyping icmp destination any source any type 8 code 0 deny ports
any
ExtremeWare 7.5 Command Reference Guide
command.
create access-list
Specifies the access list name. The access list name can be between 1 and 31
characters.
Specifies an IP destination address and subnet mask. A mask length of 32
indicates a host entry.
any specifies that any address will match.
Specifies a source IP address and subnet mask.
any specifies that any address will match.
Specifies the ICMP_TYPE number. The ICMP type is a number from 0 to 255.
Specifies the ICMP_CODE number. The ICMP code is a number from 0 to 255.
Specifies that packets that match the access list description are permitted to be
forward by this switch.
Specifies that packets that match the access list description are filtered (dropped)
by the switch.
Specifies the ingress port(s) on which this rule is applied.
Specifies the access list precedence number. The range is 1 to 25,600.
create access-list icmp destination source
933