TRENDnet TL2-G244 - Deny Icmp (Extended IP Access List Configuration); Permit Icmp (Extended IP Access List Configuration)

24-Port Gigabit Layer 2 Switch w/ 4 Shared Mini-GBIC Slots
35-10
deny icmp (Extended IP Access List Configuration)
To configure a rule that packets matched will be filtered.
Command
deny icmp {any |host
<src-ip-address>
|
<src-ip-address> <mask>
}
{any | host <dest-ip-address> | <dest-ip-address> <mask> }
{message-type
<(0-255)>
} {message-code
<(0-255)>
}
Syntax Description
any
Matching packet with any source IP address.
host
src-ip-address
Matching packet with a specific source IP address.
src-ip-address
mask
Matching packet with a range of source IP address. For
example 172.17.5.1 with mask 255.255.255.0 means
172.15.5.0~255.
any
Matching packet with any destination IP address.
host
dest-ip-address
Matching packet with a specific destination IP address.
dest-ip-address
mask
Matching packet with a range of destination IP address.
For example 172.17.5.1 with mask 255.255.255.0 means
172.15.5.0~255.
message-type
(0-255)
Matching ICMP packets with specific message type.
message-code
(0-255)
Matching ICMP packets with specific message code.
Command Modes
Extended IP Access List Configuration Mode
Example
switch(config-ext-nacl)# deny icmp any any message-type 10
message-code 10
Command History
Version History
1.00.001
This command was introduced
permit icmp (Extended IP Access List Configuration)
To configure a rule that packets matched will be processed.
Command
permit icmp {any |host
<src-ip-address>
|
<src-ip-address>
<mask>} {any | host <dest-ip-address> | <dest-ip-address>
<mask> } {message-type <(0-255)>} {message-code <(0-255)>}