Reference Guide

158 | Access Control Lists (ACL)
www.dell.com | support.dell.com
deny
s
Configure a filter that drops IPv6 packets that match the filter criteria.
Syntax
deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command.
Parameters
Defaults
Not configured.
Command Modes
ACCESS-LIST
Command
History
deny icmp
s
Configure a filter to drop all or specific ICMP messages.
Syntax
deny icmp {source address mask | any | host ipv6-address} {destination address | any | host
ipv6-address} [count [byte]]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny icmp {source address mask | any | host ipv6-address} {destination address |
any | host ipv6-address} command.
Parameters
S6000
ip-protocol-number
Enter an IPv6 protocol number.
Range: 0 to 255
icmp Enter the keyword icmp to deny Internet Control Message Protocol version 6.
ipv6 Enter the keyword ipv6 to deny any Internet Protocol version 6.
tcp Enter the keyword tcp to deny the Transmission Control protocol.
udp Enter the keyword udp to deny the User Datagram Protocol.
Version 9.0.2.0 Introduced on the S6000.
Version
8.3.7.0
Introduced on the S4810.
S6000
source address
Enter the IPv6 address of the network or host from which the packets were sent
in the
x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The
:: notation specifies successive hexadecimal fields of zero.
mask
Enter a network mask in /prefix format (/x).
any Enter the keyword any to specify that all routes are subject to the filter.
host ipv6-address Enter the keyword host followed by the IPv6 address of the host in the
x:x:x:x::x format.
The
:: notation specifies successive hexadecimal fields of zero