C613-50631-01 Rev A Command Reference for IE340 Series 2061
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV6 HARDWARE ACCESS CONTROL LIST (ACL) COMMANDS
(NAMED IPV6 HARDWARE ACL: ICMP ENTRY)
(named IPv6 hardware ACL: ICMP entry)
Overview Use this command to add a new ICMP filter entry to the current IPv6 hardware
access-list. The filter will match on any ICMP packet that has the specified IPv6
source and destination IP addresses and (optionally) ICMP type. You can specify
the value any if source or destination address does not matter.
The no variant of this command removes a filter entry from the current IPv6
hardware access-list. You can specify the filter entry for removal by entering either
its sequence number (e.g. no 100), or by entering its filter profile without
specifying its sequence number (e.g. no deny icmp 2001:0db8::0/64 any).
You can find the sequence number by running the show ipv6 access-list (IPv6
Hardware ACLs) command.
Hardware ACLs will permit access unless explicitly denied by an ACL action.
CAUTION: Specifying a “send” action enables you to use ACLs to redirect packets from
their original destination. Use such ACLs with caution. They could prevent control
packets from reaching the correct destination, such as EPSR healthcheck messages
and AMF messages.
Syntax
[<sequence-number>] <action> icmp <source-addr> <dest-addr>
[icmp-type <number>] [vlan <1-4094>]
no <sequence-number>
no <action> icmp <source-addr> <dest-addr> [icmp-type <number>]
[vlan <1-4094>]
The following actions are available for hardware ACLs:
V
alues for the <action> parameter
deny Reject packets that match the source and destination
filtering specified with this command.
permit Permit packets that match the source and destination
filtering specified with this command.
copy-to-cpu Send a copy of matching packets to the CPU.
copy-to-mirror Send a copy of matching packets to the mirror port.
Use the mirror interface command to configure the mirror
port.
send-to-mirror Send matching packets to the mirror port.
Use the mirror interface command to configure the mirror
port.
send-to-vlan-port
vlan <vid> port
<port-number>
Send matching packets to the specified port, tagged with
the specified VLAN. The specified port must belong to the
specified VLAN.
send-to-cpu Send matching packets to the CPU.
To Next Page
Loading...
Need help?
General
