Reference Guide

Command
Modes
ACCESS-LIST
Command
History
Version 9.0(1.3) Introduced on the S5000.
deny icmp
Configure a filter to drop all or specific ICMP messages.
S5000
Syntax
deny icmp {source address mask | any | host ipv6-address}
{destination address | any | host ipv6-address} [count [byte]]
| [log] [monitor]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s
sequence number
• Use the no deny icmp {source address mask | any | host ipv6-
address} {destination address | any | host ipv6-address}
command
Parameters
source address Enter the IPv6 address of the network or host from which the
packets were sent in the x:x:x:x::x format followed by the
prefix length in the /x format. The range is /0 to /128. The ::
notation specifies successive hexadecimal fields of zero.
mask Enter a network mask in /prefix format (/x).
any Enter the keyword any to specify that all routes are subject
to the filter.
host ipv6-
address
Enter the keyword host followed by the IPv6 address of the
host in the x:x:x:x::x format.
NOTE: The :: notation specifies successive hexadecimal
fields of zero. Only one occurrence of this notation is
permitted in an IPv6 address.
destination
address
Enter the IPv6 address of the network or host to which the
packets are sent in the x:x:x:x::x format followed by the
prefix length in the /x format. The range is /0 to /128. The ::
notation specifies successive hexadecimal fields of zero.
count (OPTIONAL) Enter the keyword count to count packets
processed by the filter.
byte (OPTIONAL) Enter the keyword byte to count bytes
processed by the filter.
IPv6 Access Control Lists (IPv6 ACLs)
653