Motorola WS5100 Series Cli Reference Manual page 314

14-4 WS5100 Series Switch CLI Reference Guide
deny {icmp} {source/
source-mask | host source
| any} {destination/
destination-mask | host
destination | any} [icmp-
type | [icmp-type icmp-
code]] [log] [rule-
precedence access-list-
entry precedence]
deny
Use with the command to reject ICMP packets
• deny – Rejects ICMP packets
• {icmp} – Specifies ICMP as the protocol
• {source/source-mask | host source | any} – The
source is the source IP address of the network or host
(in dotted decimal format). The source-mask is the
network mask. For example, 10.1.1.10/24 indicates
the first 24 bits of the source IP is used for matching
• any is an abbreviation for a source IP of 0.0.0.0
and source-mask bits equal to 0
• host is an abbreviation for exact source (A.B.C.D)
and source-mask bits equal to 32
• {destination/ destination-mask | host destination |
any} – Defines the destination host IP address or
destination network address
• [icmp-type |icmp-type icmp-code] – Sets the ICMP
type value from 0 to 255, and is valid only for ICMP.
The ICMP code value is from 0 to 255, and is valid
only for protocol type icmp
• [log] – Generates log messages when the packet
coming from the interface matches the ACL entry. Log
messages are generated only for router ACLs
• [rule-precedence access-list-entry precedence] –
Defines an integer value between 1-5000. This value
sets the rule precedence in the ACL