Home » Dell Manuals » Hubs & Switches » Dell C1048P Port Extender » Manual Viewer

Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 1246

deny icmp (for Extended IPv6 ACLs

Get Dell C1048P Port Extender PDF manuals and user guides

View all Dell C1048P Port Extender manuals

Add to My Manuals
Save this manual to your list of manuals

Page 1246 highlights

specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). deny icmp (for Extended IPv6 ACLs) Configure a filter to drop all or specific ICMP messages. C9000 Series NOTE: Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are described here. For a complete description on all of the keywords and variables that are available with this command, refer the topic of this command discussed earlier in this guide. Syntax deny icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] | [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number • Use the no deny icmp {source address mask | any | host ipv6address} {destination address | any | host ipv6-address} command Parameters log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated. with the seq, permit, or deny commands. You can enter a threshold in the range of 1-100. interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an interval in the range of 1-10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in IPv6 Access Control Lists (IPv6 ACLs) 1246

Section	Page
Dell Networking Command-Line Reference Guide for the C9000 Series Version 9.10(0.0)	3
About this Guide	48
Objectives	48
Audience	49
Conventions	49
Information Icons	49
CLI Basics	50
Accessing the Command Line	50
Multiple Configuration Users	51
Obtaining Help	51
Navigating the CLI	54
Using the Keyword no Command	54
Filtering show Commands	55
Command Modes	56
Control and Monitoring	67
asf-mode	69
banner exec	70
banner login	71
banner motd	73
cam-acl	74
cam-audit linecard	77
clear alarms	78
clear line	79
configure	80
debug cpu-traffic-stats	81
debug ftpserver	82
disable	83
do	84
enable	85
enable optic-info-update interval	86
end	87
exec-timeout	88
exit	89
ftp-server enable	90
ftp-server topdir	92
ftp-server username	93
hostname	94
ip ftp password	95
ip ftp source-interface	96
ip ftp username	97
ip http source-interface	98
ip telnet server enable	99
ip telnet source-interface	100
ip tftp source-interface	101
line	103
logging coredump server	104
login concurrent-session	105
login statistics	107
ping	109
power on	113
reload	113
send	114
service timestamps	115
show alarms	117
show asf	119
show chassis	120
show command-history	121
show console lp	123
show cpu-traffic-stats	124
show cpu-interface-stats	126
show debugging	129
show environment	130
show inventory	133
show linecard	135
show login statistics	139
show memory	142
show processes cpu	144
show processes ipc	148
show processes ipc flow-control	152
show processes memory	155
show rpm	162
show software ifm	165
show system linecard	167
show tech-support	168
show util-threshold cpu	181
show util-threshold memory	182
show version	184
telnet	187
terminal length	189
traceroute	190
undebug all	192
upload trace-log	193
util-threshold cpu	194
util-threshold memory	196
virtual-ip	197
write	199
File Management	200
boot system	201
cd	202
copy	203
delete	207
dir	209
format flash	211
mkdir	212
mount nfs	212
pwd	213
rename	214
restore factory-defaults	215
rmdir	216
show boot bmp	217
show boot system	218
show bootvar	219
show file	220
show file-systems	222
show os-version	224
show running-config	228
show startup-config	232
upgrade	233
verify	236
802.1X	238
debug dot1x	239
dot1x auth-fail-vlan	240
dot1x auth-server	241
dot1x auth-type mab-only	242
dot1x authentication (Configuration)	243
dot1x authentication (Interface)	244
dot1x critical-vlan	245
dot1x guest-vlan	246
dot1x host-mode	248
dot1x mac-auth-bypass	249
dot1x max-eap-req	250
dot1x max-supplicants	251
dot1x port-control	252
dot1x profile	253
dot1x quiet-period	254
dot1x reauthentication	255
dot1x reauth-max	256
dot1x server-timeout	257
dot1x static-mab	258
dot1x supplicant-timeout	259
dot1x tx-period	260
mac	261
show dot1x cos-mapping interface	262
show dot1x interface	264
show dot1x profile	267
Access Control Lists (ACL)	268
Commands Common to all ACL Types	269
remark	269
show config	270
Common IP ACL Commands	271
clear counters ip access-group	271
ip access-group	272
ip control-plane egress-filter	274
show ip accounting access-list	274
Standard IP ACL Commands	276
deny	276
ip access-list standard	278
permit	280
resequence access-list	282
resequence prefix-list ipv4	283
seq	285
show ip access-lists	287
Extended IP ACL Commands	289
deny	289
deny icmp	292
deny tcp	296
deny udp	299
ip access-list extended	302
permit	304
permit icmp	306
permit tcp	309
permit udp	312
resequence prefix-list ipv4	315
seq	316
ACL VLAN Group Commands	320
acl-vlan-group	320
cam-acl-vlan	321
description (ACL VLAN Group)	322
ip access-group (ACL VLAN Group)	323
member vlan (ACL VLAN Group)	323
show acl-vlan-group	324
show cam-acl-vlan	326
show running config acl-vlan-group	327
Common MAC ACL Commands	328
clear counters mac access-group	328
mac control-plane egress-acl	329
mac access-group	330
show mac access-lists	331
show mac accounting access-list	333
Standard MAC ACL Commands	334
deny	334
mac access-list standard	336
permit	338
seq	340
Extended MAC ACL Commands	342
deny	342
mac access-list extended	344
permit	346
seq	349
IP Prefix List Commands	351
clear ip prefix-list	351
deny	352
ip prefix-list	353
permit	354
seq	355
show config	357
show ip prefix-list detail	357
show ip prefix-list summary	359
Route Map Commands	360
continue	360
description	362
match as-path	362
match community	363
match interface	364
match ip address	366
match ip next-hop	367
match ip route-source	368
match metric	369
match origin	370
match route-type	371
match tag	372
route-map	373
set as-path	375
set automatic-tag	376
set comm-list delete	377
set community	378
set level	379
set local-preference	381
set metric	382
set metric-type	383
set next-hop	384
set origin	385
set tag	386
set weight	387
show config	388
show route-map	389
AS-Path Commands	390
ip as-path access-list	390
show ip as-path-access-lists	391
IP Community List Commands	392
ip community-list	392
show ip community-lists	393
Bidirectional Forwarding Detection (BFD)	395
bfd all-neighbors	395
bfd disable	397
bfd enable (Configuration)	398
bfd enable (Interface)	399
bfd interval	400
bfd protocol-liveness	401
ip route bfd	402
ipv6 ospf bfd all-neighbors	403
neighbor bfd	404
neighbor bfd disable	406
show bfd neighbors	407
vrrp bfd	409
Border Gateway Protocol	411
BGP IPv4 Commands	411
address-family	412
aggregate-address	413
bgp add-path	415
bgp always-compare-med	416
bgp asnotation	417
bgp bestpath as-path ignore	418
bgp bestpath as-path multipath-relax	419
bgp bestpath med confed	419
bgp bestpath med missing-as-best	420
bgp bestpath router-id ignore	421
bgp client-to-client reflection	422
bgp cluster-id	423
bgp confederation identifier	424
bgp confederation peers	425
bgp dampening	426
bgp default local-preference	428
bgp dmzlink-bw	429
bgp enforce-first-as	430
bgp fast-external-fallover	431
bgp four-octet-as-support	431
bgp graceful-restart	432
bgp log-neighbor-changes	434
bgp non-deterministic-med	434
bgp recursive-bgp-next-hop	435
bgp regex-eval-optz-disable	436
bgp router-id	438
bgp soft-reconfig-backup	439
capture bgp-pdu neighbor	440
capture bgp-pdu max-buffer-size	441
clear ip bgp	442
clear ip bgp dampening	443
clear ip bgp flap-statistics	445
clear ip bgp peer-group	447
debug ip bgp	448
debug ip bgp dampening	450
debug ip bgp events	451
debug ip bgp keepalives	452
debug ip bgp notifications	453
debug ip bgp soft-reconfiguration	454
debug ip bgp updates	455
default-metric	457
deny bandwidth	458
description	458
distance bgp	459
maximum-paths	460
neighbor activate	461
neighbor add-path	462
neighbor advertisement-interval	463
neighbor advertisement-start	464
neighbor allowas-in	465
neighbor default-originate	466
neighbor description	467
neighbor distribute-list	468
neighbor dmzlink-bw	469
neighbor ebgp-multihop	470
neighbor fall-over	471
neighbor filter-list	472
neighbor graceful-restart	473
neighbor local-as	474
neighbor maximum-prefix	475
neighbor next-hop-self	476
neighbor password	477
neighbor peer-group (assigning peers)	478
neighbor peer-group (creating group)	480
neighbor peer-group passive	481
neighbor remote-as	482
neighbor remove-private-as	483
neighbor route-map	484
neighbor route-reflector-client	485
neighbor send-community	486
neighbor shutdown	487
neighbor soft-reconfiguration inbound	488
neighbor subnet	489
neighbor timers	490
neighbor update-source	491
neighbor weight	492
network	493
network backdoor	495
permit bandwidth	496
redistribute	497
redistribute ospf	499
router bgp	500
set extcommunity bandwidth	501
show capture bgp-pdu neighbor	502
show config	503
show ip bgp	504
show ip bgp cluster-list	506
show ip bgp community	508
show ip bgp community-list	511
show ip bgp dampened-paths	513
show ip bgp detail	515
show ip bgp extcommunity-list	517
show ip bgp filter-list	519
show ip bgp flap-statistics	521
show ip bgp inconsistent-as	523
show ip bgp neighbors	524
show ip bgp next-hop	529
show ip bgp paths	530
show ip bgp paths as-path	532
show ip bgp paths community	533
show ip bgp peer-group	534
show ip bgp regexp	537
show ip bgp summary	539
show running-config bgp	542
timers bgp	542
MBGP Commands	543
debug ip bgp dampening	544
distance bgp	545
show ip bgp dampened-paths	546
BGP Extended Communities (RFC 4360)	548
deny	548
deny regex	549
description	550
ip extcommunity-list	551
match extcommunity	551
permit	552
permit regex	553
set extcommunity rt	554
set extcommunity soo	555
show ip bgp ipv4 extcommunity-list	557
show ip bgp paths extcommunity	558
show ip extcommunity-list	559
show running-config extcommunity-list	560
IPv6 BGP Commands	561
address-family	561
address family ipv6 unicast	562
aggregate-address	562
bgp always-compare-med	564
bgp bestpath as-path ignore	565
bgp bestpath med confed	565
bgp bestpath med missing-as-best	566
bgp client-to-client reflection	567
bgp cluster-id	567
bgp confederation identifier	568
bgp dampening	569
bgp default local-preference	570
bgp enforce-first-as	571
bgp fast-external-fallover	572
bgp four-octet-as-support	572
bgp graceful-restart	573
bgp log-neighbor-changes	574
bgp non-deterministic-med	575
bgp recursive-bgp-next-hop	575
bgp regex-eval-optz-disable	576
bgp router-id	577
bgp soft-reconfig-backup	578
capture bgp-pdu max-buffer-size	579
capture bgp-pdu neighbor (ipv6)	579
clear ip bgp ipv6-address	580
clear ip bgp * (asterisk)	581
clear ip bgp as-number	582
clear ip bgp ipv6 dampening	583
clear ip bgp ipv6 flap-statistics	584
clear ip bgp ipv6 unicast	585
clear ip bgp ipv6 unicast dampening	586
clear ip bgp ipv6 unicast flap-statistics	586
debug ip bgp keepalives	587
debug ip bgp ipv6 dampening	588
debug ip bgp ipv6 unicast peer-group updates	589
debug ip bgp ipv6 unicast dampening	589
debug ip bgp ipv6 unicast updates	590
debug ip bgp notifications	591
debug ip bgp updates	592
default-metric	593
description	593
distance bgp	594
ipv6 prefix-list	595
maximum-paths	596
neighbor activate	597
neighbor advertisement-interval	597
neighbor allowas-in	598
neighbor default-originate	599
neighbor description	600
neighbor distribute-list	601
neighbor ebgp-multihop	602
neighbor fall-over	602
neighbor filter-list	603
neighbor maximum-prefix	604
neighbor next-hop-self	605
neighbor peer-group (assigning peers)	606
neighbor peer-group (creating group)	607
neighbor peer-group passive	608
neighbor remote-as	609
neighbor remove-private-as	610
neighbor route-map	611
neighbor route-reflector-client	612
neighbor send-community	613
neighbor soft-reconfiguration inbound	613
neighbor subnet	614
neighbor shutdown	615
neighbor timers	616
neighbor update-source	617
neighbor weight	618
neighbor X:X:X::X password	619
network	619
network backdoor	621
redistribute	621
redistribute ospf	622
router bgp	624
show capture bgp-pdu neighbor	624
show config	625
show ip bgp next-hop	626
show ip bgp paths	626
show ip bgp paths as-path	627
show ip bgp paths community	628
show ip bgp paths extcommunity	628
show ip bgp regexp	629
show ipv6 prefix-list	630
show ip bgp ipv6 unicast	630
show ip bgp ipv6 unicast cluster-list	631
show ip bgp ipv6 unicast community	632
show ip bgp ipv6 unicast community-list	633
show ip bgp ipv6 unicast dampened-paths	633
show ip bgp ipv6 unicast detail	634
show ip bgp ipv6 unicast extcommunity-list	634
show ip bgp ipv6 unicast filter-list	635
show ip bgp ipv6 unicast flap-statistics	636
show ip bgp ipv6 unicast inconsistent-as	637
show ip bgp ipv6 unicast neighbors	637
show ip bgp ipv6 unicast peer-group	638
show ip bgp ipv6 unicast summary	639
timers bgp	640
IPv6 MBGP Commands	641
show ipv6 mbgproutes	641
Content Addressable Memory (CAM)	643
CAM Profile Commands	643
cam-acl (Configuration)	644
cam-acl-egress	647
cam-acl-egress-pe	648
cam-acl-pe	649
cam-optimization	650
show cam-acl	651
show cam-usage	651
show cam-acl-pe	655
show cam-acl-egress-pe	656
test cam-usage	657
Unified Forwarding Table Modes	658
show hardware forwarding-table mode	659
hardware forwarding-table mode	659
Control Plane Policing (CoPP)	661
clear control-traffic protocol	661
clear control-traffic queue	662
control-plane-cpuqos	664
service-policy rate-limit-cpu-queues	664
service-policy rate-limit-protocols	665
show control-traffic protocol	666
show control-traffic queue	669
show cpu-queue rate	670
show ip protocol-queue-mapping	672
show ipv6 protocol-queue-mapping	673
show mac protocol-queue-mapping	674
show protocol-queue-mapping	675
Data Center Bridging (DCB)	679

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1,000
1,001
1,002
1,003
1,004
1,005
1,006
1,007
1,008
1,009
1,010
1,011
1,012
1,013
1,014
1,015
1,016
1,017
1,018
1,019
1,020
1,021
1,022
1,023
1,024
1,025
1,026
1,027
1,028
1,029
1,030
1,031
1,032
1,033
1,034
1,035
1,036
1,037
1,038
1,039
1,040
1,041
1,042
1,043
1,044
1,045
1,046
1,047
1,048
1,049
1,050
1,051
1,052
1,053
1,054
1,055
1,056
1,057
1,058
1,059
1,060
1,061
1,062
1,063
1,064
1,065
1,066
1,067
1,068
1,069
1,070
1,071
1,072
1,073
1,074
1,075
1,076
1,077
1,078
1,079
1,080
1,081
1,082
1,083
1,084
1,085
1,086
1,087
1,088
1,089
1,090
1,091
1,092
1,093
1,094
1,095
1,096
1,097
1,098
1,099
1,100
1,101
1,102
1,103
1,104
1,105
1,106
1,107
1,108
1,109
1,110
1,111
1,112
1,113
1,114
1,115
1,116
1,117
1,118
1,119
1,120
1,121
1,122
1,123
1,124
1,125
1,126
1,127
1,128
1,129
1,130
1,131
1,132
1,133
1,134
1,135
1,136
1,137
1,138
1,139
1,140
1,141
1,142
1,143
1,144
1,145
1,146
1,147
1,148
1,149
1,150
1,151
1,152
1,153
1,154
1,155
1,156
1,157
1,158
1,159
1,160
1,161
1,162
1,163
1,164
1,165
1,166
1,167
1,168
1,169
1,170
1,171
1,172
1,173
1,174
1,175
1,176
1,177
1,178
1,179
1,180
1,181
1,182
1,183
1,184
1,185
1,186
1,187
1,188
1,189
1,190
1,191
1,192
1,193
1,194
1,195
1,196
1,197
1,198
1,199
1,200
1,201
1,202
1,203
1,204
1,205
1,206
1,207
1,208
1,209
1,210
1,211
1,212
1,213
1,214
1,215
1,216
1,217
1,218
1,219
1,220
1,221
1,222
1,223
1,224
1,225
1,226
1,227
1,228
1,229
1,230
1,231
1,232
1,233
1,234
1,235
1,236
1,237
1,238
1,239
1,240
1,241
1,242
1,243
1,244
1,245
1,246
1,247
1,248
1,249
1,250
1,251
1,252
1,253
1,254
1,255
1,256
1,257
1,258
1,259
1,260
1,261
1,262
1,263
1,264
1,265
1,266
1,267
1,268
1,269
1,270
1,271
1,272
1,273
1,274
1,275
1,276
1,277
1,278
1,279
1,280
1,281
1,282
1,283
1,284
1,285
1,286
1,287
1,288
1,289
1,290
1,291
1,292
1,293
1,294
1,295
1,296
1,297
1,298
1,299
1,300
1,301
1,302
1,303
1,304
1,305
1,306
1,307
1,308
1,309
1,310
1,311
1,312
1,313
1,314
1,315
1,316
1,317
1,318
1,319
1,320
1,321
1,322
1,323
1,324
1,325
1,326
1,327
1,328
1,329
1,330
1,331
1,332
1,333
1,334
1,335
1,336
1,337
1,338
1,339
1,340
1,341
1,342
1,343
1,344
1,345
1,346
1,347
1,348
1,349
1,350
1,351
1,352
1,353
1,354
1,355
1,356
1,357
1,358
1,359
1,360
1,361
1,362
1,363
1,364
1,365
1,366
1,367
1,368
1,369
1,370
1,371
1,372
1,373
1,374
1,375
1,376
1,377
1,378
1,379
1,380
1,381
1,382
1,383
1,384
1,385
1,386
1,387
1,388
1,389
1,390
1,391
1,392
1,393
1,394
1,395
1,396
1,397
1,398
1,399
1,400
1,401
1,402
1,403
1,404
1,405
1,406
1,407
1,408
1,409
1,410
1,411
1,412
1,413
1,414
1,415
1,416
1,417
1,418
1,419
1,420
1,421
1,422
1,423
1,424
1,425
1,426
1,427
1,428
1,429
1,430
1,431
1,432
1,433
1,434
1,435
1,436
1,437
1,438
1,439
1,440
1,441
1,442
1,443
1,444
1,445
1,446
1,447
1,448
1,449
1,450
1,451
1,452
1,453
1,454
1,455
1,456
1,457
1,458
1,459
1,460
1,461
1,462
1,463
1,464
1,465
1,466
1,467
1,468
1,469
1,470
1,471
1,472
1,473
1,474
1,475
1,476
1,477
1,478
1,479
1,480
1,481
1,482
1,483
1,484
1,485
1,486
1,487
1,488
1,489
1,490
1,491
1,492
1,493
1,494
1,495
1,496
1,497
1,498
1,499
1,500
1,501
1,502
1,503
1,504
1,505
1,506
1,507
1,508
1,509
1,510
1,511
1,512
1,513
1,514
1,515
1,516
1,517
1,518
1,519
1,520
1,521
1,522
1,523
1,524
1,525
1,526
1,527
1,528
1,529
1,530
1,531
1,532
1,533
1,534
1,535
1,536
1,537
1,538
1,539
1,540
1,541
1,542
1,543
1,544
1,545
1,546
1,547
1,548
1,549
1,550
1,551
1,552
1,553
1,554
1,555
1,556
1,557
1,558
1,559
1,560
1,561
1,562
1,563
1,564
1,565
1,566
1,567
1,568
1,569
1,570
1,571
1,572
1,573
1,574
1,575
1,576
1,577
1,578
1,579
1,580
1,581
1,582
1,583
1,584
1,585
1,586
1,587
1,588
1,589
1,590
1,591
1,592
1,593
1,594
1,595
1,596
1,597
1,598
1,599
1,600
1,601
1,602
1,603
1,604
1,605
1,606
1,607
1,608
1,609
1,610
1,611
1,612
1,613
1,614
1,615
1,616
1,617
1,618
1,619
1,620
1,621
1,622
1,623
1,624
1,625
1,626
1,627
1,628
1,629
1,630
1,631
1,632
1,633
1,634
1,635
1,636
1,637
1,638
1,639
1,640
1,641
1,642
1,643
1,644
1,645
1,646
1,647
1,648
1,649
1,650
1,651
1,652
1,653
1,654
1,655
1,656
1,657
1,658
1,659
1,660
1,661
1,662
1,663
1,664
1,665
1,666
1,667
1,668
1,669
1,670
1,671
1,672
1,673
1,674
1,675
1,676
1,677
1,678
1,679
1,680
1,681
1,682
1,683
1,684
1,685
1,686
1,687
1,688
1,689
1,690
1,691
1,692
1,693
1,694
1,695
1,696
1,697
1,698
1,699
1,700
1,701
1,702
1,703
1,704
1,705
1,706
1,707
1,708
1,709
1,710
1,711
1,712
1,713
1,714
1,715
1,716
1,717
1,718
1,719
1,720
1,721
1,722
1,723
1,724
1,725
1,726
1,727
1,728
1,729
1,730
1,731
1,732
1,733
1,734
1,735
1,736
1,737
1,738
1,739
1,740
1,741
1,742
1,743
1,744
1,745
1,746
1,747
1,748
1,749
1,750
1,751
1,752
1,753
1,754
1,755
1,756
1,757
1,758
1,759
1,760
1,761
1,762
1,763
1,764
1,765
1,766
1,767
1,768
1,769
1,770
1,771
1,772
1,773
1,774
1,775
1,776
1,777
1,778
1,779
1,780
1,781
1,782
1,783
1,784
1,785
1,786
1,787
1,788
1,789
1,790
1,791
1,792
1,793
1,794
1,795
1,796
1,797
1,798
1,799
1,800
1,801
1,802
1,803
1,804
1,805
1,806
1,807
1,808
1,809
1,810
1,811
1,812
1,813
1,814
1,815
1,816
1,817
1,818
1,819
1,820
1,821
1,822
1,823
1,824
1,825
1,826
1,827
1,828
1,829
1,830
1,831
1,832
1,833
1,834
1,835
1,836
1,837
1,838
1,839
1,840
1,841
1,842
1,843
1,844
1,845
1,846
1,847
1,848
1,849
1,850
1,851
1,852
1,853
1,854
1,855
1,856
1,857
1,858
1,859
1,860
1,861
1,862
1,863
1,864
1,865
1,866
1,867
1,868
1,869
1,870
1,871
1,872
1,873
1,874
1,875
1,876
1,877
1,878
1,879
1,880
1,881
1,882
1,883
1,884
1,885
1,886
1,887
1,888
1,889
1,890
1,891
1,892
1,893
1,894
1,895
1,896
1,897
1,898
1,899
1,900
1,901
1,902
1,903
1,904
1,905
1,906
1,907
1,908
1,909
1,910
1,911
1,912
1,913
1,914
1,915
1,916
1,917
1,918
1,919
1,920
1,921
1,922
1,923
1,924
1,925
1,926
1,927
1,928
1,929
1,930
1,931
1,932
1,933
1,934
1,935
1,936
1,937
1,938
1,939
1,940
1,941
1,942
1,943
1,944
1,945
1,946
1,947
1,948
1,949
1,950
1,951
1,952
1,953
1,954
1,955
1,956
1,957
1,958
1,959
1,960
1,961
1,962
1,963
1,964
1,965
1,966
1,967
1,968
1,969
1,970
1,971
1,972
1,973
1,974
1,975
1,976
1,977
1,978
1,979
1,980
1,981
1,982
1,983
1,984
1,985
1,986
1,987
1,988
1,989
1,990
1,991
1,992
1,993
1,994
1,995
1,996
1,997
1,998
1,999
2,000
2,001
2,002
2,003
2,004
2,005
2,006
2,007
2,008
2,009
2,010
2,011
2,012
2,013
2,014
2,015
2,016
2,017
2,018
2,019
2,020
2,021
2,022
2,023
2,024
2,025
2,026
2,027
2,028
2,029
2,030
2,031
2,032
2,033
2,034
2,035
2,036
2,037
2,038
2,039
2,040
2,041
2,042
2,043
2,044
2,045
2,046
2,047
2,048
2,049
2,050
2,051
2,052
2,053
2,054
2,055
2,056
2,057
2,058
2,059
2,060
2,061
2,062
2,063
2,064
2,065
2,066
2,067
2,068
2,069
2,070
2,071
2,072
2,073
2,074
2,075
2,076
2,077
2,078
2,079
2,080
2,081
2,082
2,083
2,084
2,085
2,086
2,087
2,088
2,089
2,090
2,091
2,092
2,093
2,094
2,095
2,096
2,097
2,098
2,099
2,100
2,101
2,102
2,103
2,104
2,105
2,106
2,107
2,108
2,109
2,110
2,111
2,112
2,113
2,114
2,115
2,116
2,117
2,118
2,119
2,120
2,121
2,122
2,123
2,124
2,125
2,126
2,127
2,128
2,129
2,130
2,131
2,132
2,133
2,134
2,135
2,136
2,137
2,138
2,139
2,140
2,141
2,142
2,143
2,144
2,145
2,146
2,147
2,148
2,149
2,150
2,151
2,152
2,153
2,154
2,155
2,156
2,157
2,158
2,159
2,160
2,161
2,162
2,163
2,164
2,165
2,166
2,167
2,168
2,169
2,170
2,171
2,172
2,173
2,174
2,175
2,176
2,177
2,178
2,179
2,180
2,181
2,182
2,183
2,184
2,185
2,186
2,187
2,188
2,189
2,190
2,191
2,192
2,193
2,194
2,195
2,196
2,197
2,198
2,199
2,200
2,201
2,202
2,203
2,204
2,205
2,206
2,207
2,208
2,209
2,210
2,211
2,212
2,213
2,214
2,215
2,216
2,217
2,218
2,219
2,220
2,221
2,222
2,223
2,224
2,225
2,226
2,227
2,228
2,229
2,230
2,231
2,232
2,233
2,234
2,235
2,236
2,237
2,238
2,239
2,240
2,241
2,242
2,243
2,244
2,245
2,246
2,247
2,248
2,249
2,250
2,251
2,252
2,253
2,254
2,255
2,256
2,257
2,258
2,259
2,260
2,261
2,262
2,263
2,264
2,265
2,266
2,267
2,268
2,269
2,270
2,271
2,272
2,273
2,274
2,275
2,276
2,277
2,278
2,279
2,280
2,281
2,282
2,283
2,284
2,285
2,286

Match case Limit results 1 per page

specified traffic instead all traffic on the interface. This feature is particularly useful

when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and

egress traffic. You may specify traffic using standard or extended access-lists. This

mechanism copies all incoming or outgoing packets on one port and forwards (mirrors)

them to another port. The source port is the monitored port (MD) and the destination

port is the monitoring port (MG).

deny icmp (for Extended IPv6 ACLs)

Configure a filter to drop all or specific ICMP messages.

C9000 Series

NOTE:

Only the options that have been newly introduced in Release 9.3(0.0) and Release 9.4(0.0) are

described here. For a complete description on all of the keywords and variables that are available with this

command, refer the topic of this command discussed earlier in this guide.

Syntax

deny icmp {

source address mask

| any | host

ipv6-address

}

{

destination address

| any | host

ipv6-address

} [

message-type

]

[count [byte]] | [log [interval

minutes

] [threshold-in-msgs

[

count

]] [monitor]

To remove this filter, you have two choices:

•

Use the

no seq sequence-number

command syntax if you know the filter’s

sequence number

•

Use the

no deny icmp {

source address mask

| any | host

ipv6-

address

} {

destination address

| any | host

ipv6-address

}

command

Parameters

log

(OPTIONAL) Enter the keyword

log

to enable the triggering of

ACL log messages.

threshold-in msgs

count

(OPTIONAL) Enter the

threshold-in-msgs

keyword followed

by a value to indicate the maximum number of ACL logs that

can be generated, exceeding which the generation of ACL logs

is terminated. with the seq, permit, or deny commands. You can

enter a threshold in the range of 1-100.

interval

minutes

(OPTIONAL) Enter the keyword

interval

followed by the time

period in minutes at which ACL logs must be generated. You can

enter an interval in the range of 1-10 minutes.

monitor

(OPTIONAL) Enter the keyword

monitor

when the rule is

describing the traffic that you want to monitor and the ACL in

IPv6 Access Control Lists (IPv6 ACLs)

1246