Connectivity Guide

permit icmp
Configures a filter to permit all or specific ICMP messages.
Syntax
permit icmp [A.B.C.D | A.B.C.D/x | any | host ip-address] [[A.B.C.D |
A.B.C.D/x | any | host ip-address] [capture | count | dscp value | fragment
| log]
Parameters
● A.B.C.D — Enter the IPv4 address in dotted decimal format.
● A.B.C.D/x — Enter the number of bits that must match the dotted decimal address.
● any — (Optional) Enter the keyword any to specify any source or destination IP address.
● host ip-address — (Optional) Enter the IPv4 address to use a host address only.
● capture — (Optional) Capture packets the filter processes.
● count — (Optional) Count packets the filter processes.
● byte — (Optional) Count bytes the filter processes.
● dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
● fragment — (Optional) Use ACLs to control packet fragments.
● log — (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not configured
Command Mode IPV4-ACL
Usage
Information
OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes
increment. The no version of this command removes the filter.
The count, byte, and log options are not supported on the S5148F-ON platform.
Example
OS10(config)# ip access-list testflow
OS10(conf-ipv4-acl)# permit icmp any any capture session 1
Supported
Releases
10.2.0E or later
permit icmp (IPv6)
Configures a filter to permit all or specific ICMP messages.
Syntax
permit icmp [A::B | A::B/x | any | host ipv6-address] [A::B | A:B/x | any |
host ipv6-address] [capture | count | dscp value | fragment | log]
Parameters
● A::B — Enter the IPv6 address in hexadecimal format separated by colons.
● A::B/x — Enter the number of bits that must match the IPv6 address.
● any — (Optional) Enter the keyword any to specify any source or destination IP address.
● host ipv6-address — (Optional) Enter the IPv6 address to use a host address only.
● capture — (Optional) Capture packets the filter processes.
● count — (Optional) Count packets the filter processes.
● byte — (Optional) Cunt bytes the filter processes.
● dscp value — (Optional) Permit a packet based on the DSCP values, from 0 to 63.
● fragment — (Optional) Use ACLs to control packet fragments.
● log — (Optional) Enables ACL logging. Information about packets that match an ACL rule are logged.
Default Not configured
Command Mode IPV6-ACL
Usage
Information
OS10 cannot count both packets and bytes; when you enter the count byte options, only bytes
increment. The no version of this command removes the filter.
The count, byte, and log options are not supported on the S5148F-ON platform.
874 Access Control Lists