Home » Dell Manuals » Servers » Dell Force10 MXL Blade » Manual Viewer

Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module FTOS Command Line Referen - Page 103

deny icmp

View all Dell Force10 MXL Blade manuals

Add to My Manuals
Save this manual to your list of manuals

Page 103 highlights

byte dscp order fragments (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL) Enter the keyword dscp to match to the IP DSCP values. (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255). Enter the keyword fragments to use ACLs to control packet fragments. Defaults Not configured. Command Modes CONFIGURATION-IP ACCESS-LIST-EXTENDED Command History Usage Information Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service (QoS) chapter of the FTOS Configuration Guide. In the MXL Switch, you can configure either count (packets) or count (bytes). However, for an ACL with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at any given time. Related Commands deny tcp deny udp ip access-list extended Assigns a filter to deny TCP packets. Assigns a filter to deny UDP packets. Creates an extended ACL. deny icmp Configure a filter to drop all or specific ICMP messages. Syntax deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte]] [order] [fragments] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. Parameters source mask any host ip-address destination dscp Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host followed by the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. Enter this keyword to deny a packet based on DSCP value. Range: 0-63 Access Control Lists (ACL) | 103

Section	Page
About this Guide	9
Objectives	9
Audience	9
Conventions	9
Information Symbols	10
Related Documents	10
CLI Basics	11
Accessing the Command Line	11
Multiple Configuration Users	12
Navigating the Command Line Interface	12
Obtaining Help	13
Using the Keyword no	15
Filtering show Commands	15
Displaying All Output	16
Filtering Command Output Multiple Times	16
Command Modes	16
EXEC Mode	16
EXEC Privilege Mode	17
CONFIGURATION Mode	17
INTERFACE Mode	17
LINE Mode	18
MAC ACCESS LIST Mode	18
IP ACCESS LIST Mode	18
ROUTE-MAP Mode	18
PREFIX-LIST Mode	19
SPANNING TREE Mode	19
Per-VLAN SPANNING TREE Plus Mode	19
RAPID SPANNING TREE Mode	19
MULTIPLE SPANNING TREE Mode	20
PROTOCOL GVRP Mode	20
ROUTER OSPF Mode	20
ROUTER RIP Mode	20
File Management	21
Overview	21
Basic File Management Commands	21
Control and Monitoring	37
Commands	37
Important Points to Remember	67
u-Boot	81
Overview	81
Commands	81
Access Control Lists (ACL)	91
Overview	91
Commands Common to all ACL Types	91
Common IP ACL Commands	94
Standard IP ACL Commands	98
Extended IP ACL Commands	102
Common MAC Access List Commands	117
Standard MAC ACL Commands	120
Extended MAC ACL Commands	123
IP Prefix List Commands	127
Route Map Commands	132
Bare Metal Provisioning	143
Overview	143
Commands	143
Content Addressable Memory (CAM)	147
Overview	147
CAM Profile Commands	147
Important Points to Remember	147
Data Center Bridging	153
Overview	153
DCB Command	153
PFC Commands	153
ETS Commands	154
DCBX Commands	154
Dynamic Host Configuration Protocol (DHCP)	187
Overview	187
Commands to Configure the System to be a DHCP Server	187
Commands to Configure the System to be a DHCP Client	194
Other Commands supported by DHCP Client	195
Commands to Configure Secure DHCP	198
FIP Snooping	205
Overview	205
GARP VLAN Registration (GVRP)	217
Commands	217
Important Points to Remember	218
Internet Group Management Protocol (IGMP)	227
IGMP Snooping Commands	227
Important Points to Remember for IGMP Snooping	227
Important Points to Remember for IGMP Querier	228
Interfaces	235
Overview	235
Basic Interface Commands	235
Port Channel Commands	277
Time Domain Reflectometer (TDR)	284
Important Points to Remember	284
UDP Broadcast	286
Important Points to Remember	286
IPv4 Routing	289
Commands	289
iSCSI Optimization	323
Overview	323
Link Aggregation Control Protocol (LACP)	331
Overview	331
Commands	331
Layer 2	337
Overview	337
MAC Addressing Commands	337
Virtual LAN (VLAN) Commands	347
Link Layer Discovery Protocol (LLDP)	355
Overview	355
Commands	355
LLDP-MED Commands	363
Multiple Spanning Tree Protocol (MSTP)	371
Overview	371
Commands	371
Open Shortest Path First (OSPFv2)	385
Overview	385
OSPFv2 Commands	385
Port Monitoring	433
Overview	433
Commands	433
Important Points to Remember	433
Private VLAN (PVLAN)	439
Commands	439
Private VLAN Concepts	440
Per-VLAN Spanning Tree Plus (PVST+)	449
Overview	449
Commands	449
Quality of Service (QoS)	461
Overview	461
Global Configuration Commands	461
Per-Port QoS Commands	462
Policy-Based QoS Commands	467
Routing Information Protocol (RIP)	491
Overview	491
Commands	491
Remote Monitoring (RMON)	507
Overview	507
Commands	507
Rapid Spanning Tree Protocol (RSTP)	519
Overview	519
Commands	519
Security	531
Commands	531
AAA Accounting Commands	531
Authorization and Privilege Commands	534
Authentication and Password Commands	537
RADIUS Commands	548
TACACS+ Commands	552
SSH Server and SCP Commands	555
Secure DHCP Commands	566
sFlow	571
Overview	571
Important Points to Remember	571
Commands	572
Simple Network Management Protocol (SNMP) and Syslog	579
Overview	579
SNMP Commands	579
Important Points to Remember	580
Syslog Commands	594
Storm Control	605
Overview	605
Commands	605
Important Points to Remember	605
Stacking Commands	611
Overview	611
Commands	611
Spanning Tree Protocol (STP)	621
Overview	621
System Time and Date	631
Overview	631
Commands	631
Uplink Failure Detection (UFD)	645
Overview	645
Commands	645
VLAN Stacking	655
Overview	655
Important Points to Remember	655
Virtual Router Redundancy Protocol (VRRP)	663
IPv4 VRRP Commands	663
Debugging and Diagnostics	675
Offline Diagnostic Commands	675
Important Points to Remember	675
Buffer Tuning Commands	677
Hardware Commands	682
Internet Control Message Protocol (ICMP) Message Types	695
SNMP Traps	697
Index	701

Match case Limit results 1 per page

Access Control Lists (ACL)

103

Defaults

Not configured.

Command Modes

CONFIGURATION-IP ACCESS-LIST-EXTENDED

Command

History

Usage

Information

The

order

option is relevant in the context of the Policy QoS feature only. For more information, refer

to the

Quality of Service (QoS)

chapter of the

FTOS Configuration Guide

In the MXL Switch, you can configure either count (packets) or count (bytes). However, for an ACL

with multiple rules, you can configure some ACLs with count (packets) and others as count (bytes) at

any given time

Commands

deny icmp

Configure a filter to drop all or specific ICMP messages.

Syntax

deny icmp

{

source mask

any

host

ip-address

} {

destination mask

any

host

ip-address

} [

dscp

]

[

message-type

] [

count

[

byte

]] [

order

] [

fragments

]

To remove this filter, you have two choices:

•

Use the

seq

sequence-number

command if you know the filter’s sequence number.

•

Use the

deny

icmp

{

source mask

any

host

ip-address

} {

destination mask

any

host

ip-address

} command.

Parameters

byte

(OPTIONAL) Enter the keyword

byte

to count bytes processed by the filter.

dscp

(OPTIONAL) Enter the keyword

dscp

to match to the IP DSCP values.

order

(OPTIONAL) Enter the keyword

order

to specify the QoS priority for the

ACL entry.

Range:

0-254 (where 0 is the highest priority and 254 is the lowest; lower

order numbers have a higher priority)

Default:

If the order keyword is not used, the ACLs have the lowest order by

default (255).

fragments

Enter the keyword

fragments

to use ACLs to control packet fragments.

Version 8.3.16.1

Introduced on MXL 10/40GbE Switch IO Module

deny tcp

Assigns a filter to deny TCP packets.

deny udp

Assigns a filter to deny UDP packets.

ip access-list extended

Creates an extended ACL.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in

A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword

any

to specify that all routes are subject to the filter.

host

ip-address

Enter the keyword

host

followed by the IP address to specify a host IP address.

destination

Enter the IP address of the network or host to which the packets are sent.

dscp

Enter this keyword to deny a packet based on DSCP value.

Range: 0-63