Command Reference Guide

IPv6 Access Control Lists (IPv6 ACLs) | 713
Usage
Information
The C-Series cannot count both packets and bytes, so when you enter the count byte options,
only bytes are incremented.
The following table lists the keywords displayed in the CLI help and their corresponding
ICMP Message Type Name.
deny tcp
c e s
Configure a filter that drops TCP packets that match the filter criteria.
Syntax
deny tcp {source address mask | any | host ipv6-address} [operator port [port]] {destination address
| any | host ipv6-address} [bit] [operator port [port]] [count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
Version 7.8.1.0 Introduced support on the C-Series
Version 7.4.1.0 Introduced support on the E-Series TeraScale
Added
monitor option
Table 24-1. ICMP Message Type Keywords
Keyword ICMP Message Type Name
dest-unreachable Destination unreachable
echo Echo request (ping)
echo-reply Echo reply
inverse-nd-na Inverse neighbor discovery advertisement
inverse-nd-ns Inverse neighbor discovery solicitation
log Log matches against this entry
mobile-advertisement Mobile prefix advertisement
mobile-solicitation Mobile prefix solicitation
mrouter-advertisement Multicast router advertisement
mrouter-solicitation Multicast router solicitation
mrouter-termination Multicast router termination
nd-na Neighbor advertisement
nd-ns Neighbor solicitation
packet-too-big Packet is too big
parameter-problem Parameter problems
redirect Neighbor redirect
router-advertisement Neighbor discovery router advertisement
router-renumbering All routers renumbering
router-solicitation Neighbor discovery router solicitation
time-exceeded All time exceeded