Command Line Reference Guide

permit icmp
Configure a filter to allow all or specific internet control message protocol (ICMP) messages.
S5000
Syntax
permit icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} [message-type]
[count [byte]] | [log] [monitor]
To remove this filter, you have two choices:
Use the no seq sequence-number command if you know the filter’s sequence
number.
Use the no permit icmp {source address mask | any | host
ipv6-address} {destination address | any | host ipv6-
address} command.
Parameters
source address
Enter the IPv6 address of the network or host from which the packets
were sent in the x:x:x:x::x format followed by the prefix length in the /x
format. The range is /0 to /128. The :: notation specifies successive
hexadecimal fields of zero.
mask
Enter a network mask in /prefix format (/x).
host
ipv6-address
Enter the keyword host followed by the IPv6 address of the host in
the x:x:x:x::x format. The :: notation specifies successive hexadecimal
fields of zero.
destination
address
Enter the IPv6 address of the network or host to which the packets
are sent in the x:x:x:x::x format followed by the prefix length in the /x
format. The range is /0 to /128. The :: notation specifies successive
hexadecimal fields of zero.
message-type
(OPTIONAL) Enter an ICMP message type, either with the type (and
code, if necessary) numbers or with the name of the message type.
The range is 0 to 255 for ICMP type and 0 to 255 for ICMP code.
count (OPTIONAL) Enter the keyword count to count packets processed
by the filter.
byte (OPTIONAL) Enter the keyword byte to count bytes processed by
the filter.
log (OPTIONAL) Enter the keyword log to have the information kept in an
ACL log file.
monitor (OPTIONAL) Enter the keyword monitor to monitor traffic on the
monitoring interface specified in the flow-based monitoring session
along with the filter operation.
Defaults Not configured.
Command Modes ACCESS-LIST
615