Chapter 68: ACL Commands
1040 Section X: Network Management
ACCESS-LIST ICMP
Syntax
access-list
id_number
action
icmp
src_ipaddress
dst_ipaddress
icmp-type
icmp-type
[vlan
vid
]
Parameters
id_number Specifies an ID number for a new ACL. The range is
3000 to 3699. Each access list on the switch must have
a unique ID number.
action Specifies the action of the ACL. Here are the possible
actions:
permit Forwards all ingress packets that match the
ACL.
deny Discards all ingress packets that match the
ACL.
copy-to-mirror
Copies all ingress packets that match the ACL
to the destination port of the port mirror. This
action must be used together with the port
mirror feature, explained in Chapter 17, “Port
Mirror” on page 299.
scr_ipaddress Specifies the source IP address of the ingress packets
the access list should filter. Here are the possible
options:
any Matches any IP address.
ipaddress/mask
Matches packets that have a source IP
address of a subnet or an end node. The
mask is a decimal number that represents the
number of bits in the address, from left to
right, that constitute the network portion of the
address. For example, the subnet address
149.11.11.0 would have a mask of “24” for the
twenty-four bits of the network section of the
address. The IP address and the mask are
separated by a slash (/); for example,
“149.11.11.0/24”.
To Next Page
Loading...
