C613-50631-01 Rev A Command Reference for IE340 Series 1975
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV4 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED HARDWARE ACL ENTRY FOR ICMP)
Mode IPv4 Hardware ACL Configuration (accessed by running the command access-list
hardware (named hardware ACL))
Default On an interface controlled by a hardware ACL, any traffic that does not explicitly
match a filter is permitted.
Usage notes To use this command, first run the command access-list hardware (named
hardware ACL) and enter the desired access-list name. This changes the prompt to:
awplus(config-ip-hw-acl)#
Then use this command (and the other “named hardware ACL: entry” commands)
to add filter entries. You can add multiple filter entries to an ACL. You can insert a
<ip-addr>/<prefix> Match any destination IP address
within the specified subnet.
Specify the subnet by entering the
IPv4 address, then a forward slash,
then the prefix length.
<ip-addr>
<reverse-mask>
Match any destination IP address
within the specified subnet.
Specify the subnet by entering a
reverse mask in dotted decimal
format. For example, entering
“192.168.1.1 0.0.0.255” is the same
as entering 192.168.1.1/24.
icmp-type
<number>
The type of ICMP message to match against, as defined in
RFC792 and RFC950. Values include:
0 Echo replies.
3 Destination unreachable
messages.
4 Source quench messages.
5 Redirect (change route) messages.
8 Echo requests.
11 Time exceeded messages.
12 Parameter problem messages.
13 Timestamp requests.
14 Timestamp replies.
15 Information requests.
16 Information replies.
17 Address mask requests.
18 Address mask replies.
vlan <1-4094> The VLAN to match against. The ACL will match against the
specified ID in the packet’s VLAN tag.
Parameter Description
To Next Page
Loading...
