Reference Guide

Usage
Information
The C-Series cannot count both packets and bytes, so when you enter the count byte
options, only bytes are incremented.
The information below lists the keywords displayed in the CLI help and their corresponding
ICMP Message Type Name.
Keyword ICMP Message Type Name
dest-unreachable Destination unreachable
echo Echo request (ping)
echo-reply Echo reply
inverse-nd-na Inverse neighbor discovery advertisement
inverse-nd-ns Inverse neighbor discovery solicitation
log Log matches against this entry
mobile-
advertisement
Mobile prefix advertisement
mobile-solicitation Mobile prefix solicitation
mrouter-
advertisement
Multicast router advertisement
mrouter-solicitation Multicast router solicitation
mrouter-termination Multicast router termination
nd-na Neighbor advertisement
nd-ns Neighbor solicitation
packet-too-big Packet is too big
parameter-problem Parameter problems
redirect Neighbor redirect
router-
advertisement
Neighbor discovery router advertisement
router-renumbering All routers renumbering
router-solicitation Neighbor discovery router solicitation
time-exceeded All time exceeded
deny tcp
Configure a filter that drops TCP packets that match the filter criteria.
C-Series, E-Series, S-Series
Syntax
deny tcp {source address mask | any | host ipv6-address}
[operator port [port]] {destination address | any | host ipv6-
address} [bit] [operator port [port]] [count [byte]] | [log]
[monitor]
918