Motorola RFS7000 Series Reference Manual page 398

14-18 Overview
• Select the protocol type icmp to allow/deny icmp packets. Selecting icmp allows filtering of icmp
packets based on icmp type and code.
NOTE The log option is functional only for router ACL's. The log option causes an
informational logging message about the packet matching the entry sent to the
console.
Example
The example below allows IP traffic from the source subnet to destination subnet and denies all other traffic
over an interface.
RFS7000(config-ext-nacl)#permit ip 192.168.1.10/24 192.168.2.0/24 rule-precedence
40
RFS7000(config-ext-nacl)#
The example below permits telnet from the source subnet and the destination subnet and denies all other
traffic over an interface.
RFS7000(config-ext-nacl)#permit tcp 192.168.4.0/24 192.168.5.0/24 eq 23 rule-pre
cedence 10
RFS7000(config-ext-nacl)#
The example below permits icmp based traffic and denies all other traffic over an interface.
RFS7000(config-ext-nacl)#permit icmp any any rule-precedence 30
RFS7000(config-ext-nacl)#)#