User's Manual

Chapter 3 - Operation and Administration Using the CLI NPU Configuration
4Motion 196 System Manual
Destination
IP address
any Indicates that ICMP traffic
destined to the NPU interface IP
address is permitted or denied.
npu(config-ext-nacl)#permit
icmp host 1.1.1.1 any
npu(config-std-nacl)# deny
host 1.1.1.1 host any
host
<src-ip-ad
dress>
Indicates that ICMP traffic
destined to the NPU interface
destination IP address is
permitted or denied.
npu(config-std-nacl)#
permit host any host
1.1.1.1
npu(config-ext-nacl)#deny
icmp any host 1.1.1.1
<network-s
rc-ip>
<mask>
Indicates that ICMP traffic to the
NPU interface subnet is to be
permitted or denied.
npu(config-ext-nacl)#permit
icmp host any host 1.1.1.0
255.255.255.0
npu(config-ext-nacl)#deny
icmp host any host 1.1.1.0
255.255.255.0
Command
Syntax
npu(config-ext-nacl)# permit icmp { any | host <src-ip-address> |
<src-ip-address> <mask> } { any | host <dest-ip-address> |
<dest-ip-address> <mask> }
npu(config-ext-nacl)# deny icmp { any | host <src-ip-address> |
<src-ip-address> <mask> } { any | host <dest-ip-address> |
<dest-ip-address> <mask> }
Privilege
Level
10
Syntax
Description
Parameter Description Presence Default
Value
Possible
Values
{ any | host
<src-ip-addres
s> |
<src-ip-addres
s> <mask> }
Indicates the source IP
address/subnet for which
incoming ICMP traffic is
permitted/denied.
Mandatory N/A For details
Table 3-22
{ any | host
<dest-ip-addre
ss> |
<dest-ip-addre
ss> <mask> }
Indicates the destination IP
address/subnet for which
ICMP traffic is
permitted/denied.
Optional any For details
Table 3-22
Table 3-22: Parameters for Configuring Permit/Deny Rules for ICMP Traffic
Parameter Description Example