C613-50100-01 REV C Command Reference for x930 Series 1877
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(ACCESS-LIST HARDWARE ICMP FILTER)
Mode IPv4 Hardware ACL Configuration
Default Any traffic on an interface controlled by a hardware ACL that does not explicitly
match a filter is permitted.
Usage First create a named hardware access-list that applies the appropriate permit/deny
requirements. Then use the access-group command to apply this access-list to a
specific port or range. Note that this command will apply the access-list only to
incoming data packets.
<source> The source address of the packets. You can specify a single host, a
subnet, or all sources. The following are the valid formats for
specifying the source:
<ip-addr>/
<prefix>
An IPv4 address, followed by a
forward slash, then the prefix length.
This matches any source IP address
within the specified subnet.
<ip-addr>
<reverse-mask>
Alternatively, you can enter a reverse
mask in dotted decimal format. For
example, entering 192.168.1.1
0.0.0.255 is the same as entering
192.168.1.1/24.
host<ip-addr> Matches a single source host with
the IP address given by <ip-addr> in
dotted decimal notation.
any Matches any source IP address.
<destination> The destination address of the packets. You can specify a single
host, a subnet, or all destinations. The following are the valid
formats for specifying the destination:
<ip-addr>/
<prefix>
An IPv4 address, followed by a
forward slash, then the prefix length.
This matches any destination IP
address within the specified subnet.
<ip-addr>
<reverse-mask>
Alternatively, you can enter a reverse
mask in dotted decimal format. For
example, entering 192.168.1.1
0.0.0.255 is the same as entering
192.168.1.1/24.
host<ip-addr> Matches a single destination host
with the IP address given by <ip-
addr> in dotted decimal notation.
any Matches any destination IP address.
icmp-type The ICMP type.
<icmp-value> The value of the ICMP
type.
Parameter Description