Specifications

acl permit|deny icmp
42 SSR Command Line Interface Reference Manual
Restrictions
When you apply an ACL to an interface, the SSR appends an implicit deny rule to that ACL.
The implicit deny rule denies all traffic. If you intend to allow all traffic that doesn’t
match your specified ACL rules to go through, you must explicitly define a rule to permit
all traffic.
Examples
To deny ICMP traffic from the subnet 10.24.5.0 (with a 24 bit netmask) to any destination:
To create an ACL to permit ICMP traffic from the host 10.12.28.44 to subnet 10.43.21.0:
ssr(config)# acl 310 deny icmp 10.24.5.0/24 any
ssr(config)# acl 312 permit icmp 10.12.28.44 10.43.21.0/24