D-Link DGS-3130 Emulator - Page 59

DGS-3130 Layer 3 Stackable Managed Switch CLI Reference Guide ICMP-TYPE ICMP-CODE ICMP-MESSAGE (Optional) Specifies the ICMP message type. The valid number for the message type is from 0 to 255. (Optional) Specifies the ICMP message code. The valid number for the message code is from 0 to 255. (Optional) Specifies the ICMP message. The pre-defined parameters are available for selection: administratively-prohibited,alternate-address,conversionerror,host-prohibited,net-prohibited,echo,echo-reply,pointer-indicates-error,hostisolated,host-precedence-violation,host-redirect,host-tos-redirect,host-tosunreachable,host-unknown,host-unreachable, information-reply,informationrequest,mask-reply,mask-request,mobile-redirect,net-redirect,net-tosredirect,net-tos-unreachable, net-unreachable,net-unknown,bad-length,optionmissing,packet-fragment,parameter-problem,port-unreachable,precedencecutoff, protocol-unreachable,reassembly-timeout,redirect-message,routeradvertisement,router-solicitation,source-quench,source-route-failed, timeexceeded,timestamp-reply,timestamp-request,traceroute,ttl-expired,unreachable. Default None. Command Mode IP Access-list Configuration Mode. Command Default Level Level: 12. Usage Guideline If a rule entry is created without a sequence number, a sequence number will be automatically assigned. If it is the first entry, the sequence number 10 is assigned. A subsequent rule entry will be assigned a sequence number that is 10 greater than the largest sequence number in that access list and is placed at the end of the list. The user can use the access-list resequence command to change the start sequence number and the increment number of entries for the specified access list. After the command is applied, new entries without any specified sequence number will be assigned a number based on the new sequence setting of the specified access list. When you manually assign the sequence number, it is better to have a reserved interval for future lower sequence number entries. Otherwise, it will be more difficult to insert an entry with a lower sequence number. The sequence number must be unique in the domain of an access list. If you enter a sequence number that is already present, an error message will be shown. To create a matching rule for an IP standard access list, only the source IP address or destination IP address fields can be specified. Example This example shows how to create four entries for an IP extended access list, named Strict-Control. These entries are: permit TCP packets destined for network 10.20.0.0, permit TCP packets destined for host 10.100.1.2, permit all TCP packets go to TCP destination port 80 and permit all ICMP packets. Switch# configure terminal Switch(config)# ip access-list extended Strict-Control Switch(config-ip-ext-acl)# permit tcp any 10.20.0.0 0.0.255.255 Switch(config-ip-ext-acl)# permit tcp any host 10.100.1.2 Switch(config-ip-ext-acl)# permit tcp any any eq 80 Switch(config-ip-ext-acl)# permit icmp any any Switch(config-ip-ext-acl)# 55