Concept Guide

of ACL logs is terminated with the seq, permit, or deny commands. The threshold
range is from 1 to 100.
interval minutes (OPTIONAL) Enter the keyword interval followed by the time period in minutes at which
ACL logs must be generated. The interval range is from 1 to 10 minutes.
monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the trac that you
want to monitor and the ACL in which you are creating the rule is applied to the
monitored interface.
Defaults Not congured.
Command Modes ACCESS-LIST
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.4(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module.
9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
permit icmp
To allow all or specic internet control message protocol (ICMP) messages, congure a lter.
Syntax
permit icmp {source address mask | any | host ipv6-address} {destination
address | any | host ipv6-address} [message-type] [count [byte]] | [log]
[interval minutes] [threshold-in-msgs [count]][monitor]
To remove this lter, you have two choices:
• Use the no seq sequence-number command if you know the lter’s sequence number.
•
Use the no permit icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} command.
Parameters
source address Enter the IPv6 address of the network or host from which the packets were sent in the
x:x:x:x::x format then the prex length in the /x format. The range is from /0 to /128.
The :: notation species successive hexadecimal elds of zero.
mask Enter a network mask in /prex format (/x).
any Enter the keyword any to specify that all routes are subject to the lter.
host ipv6-address Enter the keyword host then the IPv6 address of the host in the x:x:x:x::x format. The ::
notation species successive hexadecimal elds of zero.
destination address Enter the IPv6 address of the network or host to which the packets are sent in the
x:x:x:x::x format then the prex length in the /x format. The range is from /0 to /128.
The :: notation species successive hexadecimal elds of zero.
message-type (OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary)
numbers or with the name of the message type. The range is from 0 to 255 for ICMP
type and from 0 to 255 for ICMP code.
652 IPv6 Access Control Lists (IPv6 ACLs)