558
Configuring Network Security with ACLs
How to Configure Network Security with ACLs
Step
2d
access-list access-list-number
{deny | permit} icmp source
source-wildcard destination
destination-wildcard [icmp-type |
[[icmp-type icmp-code] |
[icmp-message]] [precedence
precedence] [tos tos]
[fragments] [log] [log-input]
[time-range time-range-name]
[dscp dscp]
(Optional) Defines an extended ICMP access list and the access conditions.
icmp—Internet Control Message Protocol.
The ICMP parameters are the same as those described for most IP protocols in
Step 2a, with the addition of the ICMP message type and code parameters.
These optional keywords have these meanings:
icmp-type—Filters by ICMP message type, a number from 0 to 255.
icmp-code—Filters ICMP packets that are filtered by the ICMP message
code type, a number from 0 to 255.
icmp-message—Filters ICMP packets by the ICMP message type name or
the ICMP message type and code name. To see a list of ICMP message
type names and code names, use the ?, or see the “Configuring IP
Services” section of the Cisco IOS IP Configuration Guide, Release 12.2.
Step
2e
access-list access-list-number
{deny | permit} igmp source
source-wildcard destination
destination-wildcard [igmp-type]
[precedence precedence] [tos
tos] [fragments] [log] [
log-input]
[time-range time-range-name]
[dscp dscp]
(Optional) Defines an extended IGMP access list and the access conditions.
igmp—Internet Group Management Protocol.
The IGMP parameters are the same as those described for most IP protocols in
Step 2a, with this optional parameter.
igmp-type—Matches IGMP message type, enters a number from 0 to 15, or
enters the message name (dvmrp, host-query, host-report, pim, or trace).
3. end Returns to privileged EXEC mode.
Command Purpose
To Next Page
Loading...
Need help?
General
