Command Line Reference Guide

IPv6 Access Control Lists (IPv6 ACLs) | 661
The following table lists the keywords displayed in the CLI help and their corresponding ICMP
Message Type Name.
deny tcp
c e s
Configure a filter that drops TCP packets that match the filter criteria.
Syntax
deny tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination
address | any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
•Use the no seq sequence-number command syntax if you know the filter’s sequence number or
•Use the no deny tcp {source address mask | any | host ipv6-address} {destination address
| any | host ipv6-address} command.
Parameters
Table 27-73. ICMP Message Type Keywords
Keyword ICMP Message Type Name
dest-unreachable Destination unreachable
echo Echo request (ping)
echo-reply Echo reply
inverse-nd-na Inverse neighbor discovery advertisement
inverse-nd-ns Inverse neighbor discovery solicitation
log Log matches against this entry
mobile-advertisement Mobile prefix advertisement
mobile-solicitation Mobile prefix solicitation
mrouter-advertisement Multicast router advertisement
mrouter-solicitation Multicast router solicitation
mrouter-termination Multicast router termination
nd-na Neighbor advertisement
nd-ns Neighbor solicitation
packet-too-big Packet is too big
parameter-problem Parameter problems
redirect Neighbor redirect
router-advertisement Neighbor discovery router advertisement
router-renumbering All routers renumbering
router-solicitation Neighbor discovery router solicitation
time-exceeded All time exceeded
source address
Enter the IPv6 address of the network or host from which the packets were sent in
the
x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
mask Enter a network mask in /prefix format (/x).