Home » Dell Manuals » Servers » Dell Force10 MXL Blade » Manual Viewer

Dell Force10 MXL Blade MXL 10/40GbE Switch IO Module FTOS Command Line Referen - Page 111

permit icmp

View all Dell Force10 MXL Blade manuals

Add to My Manuals
Save this manual to your list of manuals

Page 111 highlights

Related Commands ip access-list extended permit tcp permit udp Creates an extended ACL. Assigns a permit filter for TCP packets. Assigns a permit filter for UDP packets. permit icmp Configure a filter to allow all or specific ICMP messages. Syntax permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte]] [order] [fragments] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no permit icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. Parameters source mask any host ip-address destination dscp message-type count byte order fragments Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host followed by the IP address to specify a host IP address. Enter the IP address of the network or host to which the packets are sent. Enter this keyword to deny a packet based on DSCP value. Range: 0-63 (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are listed in Table 6-2). Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code (OPTIONAL) Enter the keyword count to count packets processed by the filter. (OPTIONAL) Enter the keyword byte to count bytes processed by the filter. (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority) Default: If the order keyword is not used, the ACLs have the lowest order by default (255). Enter the keyword fragments to use ACLs to control packet fragments. Defaults Command Modes Command History Usage Information Not configured CONFIGURATION-IP ACCESS-LIST-STANDARD Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the FTOS Configuration Guide. Access Control Lists (ACL) | 111

Section	Page
About this Guide	9
Objectives	9
Audience	9
Conventions	9
Information Symbols	10
Related Documents	10
CLI Basics	11
Accessing the Command Line	11
Multiple Configuration Users	12
Navigating the Command Line Interface	12
Obtaining Help	13
Using the Keyword no	15
Filtering show Commands	15
Displaying All Output	16
Filtering Command Output Multiple Times	16
Command Modes	16
EXEC Mode	16
EXEC Privilege Mode	17
CONFIGURATION Mode	17
INTERFACE Mode	17
LINE Mode	18
MAC ACCESS LIST Mode	18
IP ACCESS LIST Mode	18
ROUTE-MAP Mode	18
PREFIX-LIST Mode	19
SPANNING TREE Mode	19
Per-VLAN SPANNING TREE Plus Mode	19
RAPID SPANNING TREE Mode	19
MULTIPLE SPANNING TREE Mode	20
PROTOCOL GVRP Mode	20
ROUTER OSPF Mode	20
ROUTER RIP Mode	20
File Management	21
Overview	21
Basic File Management Commands	21
Control and Monitoring	37
Commands	37
Important Points to Remember	67
u-Boot	81
Overview	81
Commands	81
Access Control Lists (ACL)	91
Overview	91
Commands Common to all ACL Types	91
Common IP ACL Commands	94
Standard IP ACL Commands	98
Extended IP ACL Commands	102
Common MAC Access List Commands	117
Standard MAC ACL Commands	120
Extended MAC ACL Commands	123
IP Prefix List Commands	127
Route Map Commands	132
Bare Metal Provisioning	143
Overview	143
Commands	143
Content Addressable Memory (CAM)	147
Overview	147
CAM Profile Commands	147
Important Points to Remember	147
Data Center Bridging	153
Overview	153
DCB Command	153
PFC Commands	153
ETS Commands	154
DCBX Commands	154
Dynamic Host Configuration Protocol (DHCP)	187
Overview	187
Commands to Configure the System to be a DHCP Server	187
Commands to Configure the System to be a DHCP Client	194
Other Commands supported by DHCP Client	195
Commands to Configure Secure DHCP	198
FIP Snooping	205
Overview	205
GARP VLAN Registration (GVRP)	217
Commands	217
Important Points to Remember	218
Internet Group Management Protocol (IGMP)	227
IGMP Snooping Commands	227
Important Points to Remember for IGMP Snooping	227
Important Points to Remember for IGMP Querier	228
Interfaces	235
Overview	235
Basic Interface Commands	235
Port Channel Commands	277
Time Domain Reflectometer (TDR)	284
Important Points to Remember	284
UDP Broadcast	286
Important Points to Remember	286
IPv4 Routing	289
Commands	289
iSCSI Optimization	323
Overview	323
Link Aggregation Control Protocol (LACP)	331
Overview	331
Commands	331
Layer 2	337
Overview	337
MAC Addressing Commands	337
Virtual LAN (VLAN) Commands	347
Link Layer Discovery Protocol (LLDP)	355
Overview	355
Commands	355
LLDP-MED Commands	363
Multiple Spanning Tree Protocol (MSTP)	371
Overview	371
Commands	371
Open Shortest Path First (OSPFv2)	385
Overview	385
OSPFv2 Commands	385
Port Monitoring	433
Overview	433
Commands	433
Important Points to Remember	433
Private VLAN (PVLAN)	439
Commands	439
Private VLAN Concepts	440
Per-VLAN Spanning Tree Plus (PVST+)	449
Overview	449
Commands	449
Quality of Service (QoS)	461
Overview	461
Global Configuration Commands	461
Per-Port QoS Commands	462
Policy-Based QoS Commands	467
Routing Information Protocol (RIP)	491
Overview	491
Commands	491
Remote Monitoring (RMON)	507
Overview	507
Commands	507
Rapid Spanning Tree Protocol (RSTP)	519
Overview	519
Commands	519
Security	531
Commands	531
AAA Accounting Commands	531
Authorization and Privilege Commands	534
Authentication and Password Commands	537
RADIUS Commands	548
TACACS+ Commands	552
SSH Server and SCP Commands	555
Secure DHCP Commands	566
sFlow	571
Overview	571
Important Points to Remember	571
Commands	572
Simple Network Management Protocol (SNMP) and Syslog	579
Overview	579
SNMP Commands	579
Important Points to Remember	580
Syslog Commands	594
Storm Control	605
Overview	605
Commands	605
Important Points to Remember	605
Stacking Commands	611
Overview	611
Commands	611
Spanning Tree Protocol (STP)	621
Overview	621
System Time and Date	631
Overview	631
Commands	631
Uplink Failure Detection (UFD)	645
Overview	645
Commands	645
VLAN Stacking	655
Overview	655
Important Points to Remember	655
Virtual Router Redundancy Protocol (VRRP)	663
IPv4 VRRP Commands	663
Debugging and Diagnostics	675
Offline Diagnostic Commands	675
Important Points to Remember	675
Buffer Tuning Commands	677
Hardware Commands	682
Internet Control Message Protocol (ICMP) Message Types	695
SNMP Traps	697
Index	701

Match case Limit results 1 per page

Access Control Lists (ACL)

111

Commands

permit icmp

Configure a filter to allow all or specific ICMP messages.

Syntax

permit icmp

{

source mask

any

host

ip-address

} {

destination mask

any

host

ip-address

}

[

dscp

] [

message-type

] [

count

[

byte

]] [

order

] [

fragments

]

To remove this filter, you have two choices:

•

Use the

seq

sequence-number

command if you know the filter’s sequence number.

•

Use the

permit

icmp

{

source mask

any

host

ip-address

} {

destination mask

any

host

ip-address

} command.

Parameters

Defaults

Not configured

Command Modes

CONFIGURATION-IP ACCESS-LIST-STANDARD

Command

History

Usage

Information

The

order

option is relevant in the context of the Policy QoS feature only. For more information, refer

to the Quality of Service chapter of the

FTOS Configuration Guide

ip access-list extended

Creates an extended ACL.

permit tcp

Assigns a permit filter for TCP packets.

permit udp

Assigns a permit filter for UDP packets.

source

Enter the IP address of the network or host from which the packets were sent.

mask

Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in

A.B.C.D format, may be either contiguous or non-contiguous.

any

Enter the keyword

any

to specify that all routes are subject to the filter.

host

ip-address

Enter the keyword

host

followed by the IP address to specify a host IP address.

destination

Enter the IP address of the network or host to which the packets are sent.

dscp

Enter this keyword to deny a packet based on DSCP value.

Range: 0-63

message-type

(OPTIONAL) Enter an ICMP message type, either with the type (and code, if

necessary) numbers or with the name of the message type (ICMP message types are

listed in

Table 6-2

Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code

count

(OPTIONAL) Enter the keyword

count

to count packets processed by the filter.

byte

(OPTIONAL) Enter the keyword

byte

to count bytes processed by the filter.

order

(OPTIONAL) Enter the keyword

order

to specify the QoS priority for the ACL entry.

Range:

0-254 (where 0 is the highest priority and 254 is the lowest; lower order

numbers have a higher priority)

Default:

If the order keyword is not used, the ACLs have the lowest order by default

(255).

fragments

Enter the keyword

fragments

to use ACLs to control packet fragments.

Version 8.3.16.1

Introduced on MXL 10/40GbE Switch IO Module