User's Manual

Chapter 3 - Operation and Administration Using the CLI NPU Configuration
4Motion 195 System Manual
npu(config-ext-nacl)# permit icmp {any | host <src-ip-address> |
<src-ip-address> <mask>} {any | host <dest-ip-address> |
<dest-ip-address> <mask>}
npu(config-ext-nacl)# deny icmp {any | host <src-ip-address> |
<src-ip-address> <mask>} {any | host <dest-ip-address> |
<dest-ip-address> <mask>}
In the above commands, it is mandatory to specify the source IP address for which
the Permit/Deny rule is to be created. If you do not specify the destination IP
address/subnet mask, by default, traffic to all destination IP addresses is
permitted/denied.
The following table lists the parameters and their descriptions in these
commands:
Table 3-22: Parameters for Configuring Permit/Deny Rules for ICMP Traffic
Parameter Description Example
Source IP any Indicates that incoming ICMP
traffic from any source IP
address is permitted or denied.
npu(config-ext-nacl)#permit
icmp any
npu(config-ext-nacl)#deny
icmp any
host
<src-ip-ad
dress>
Indicates that incoming ICMP
traffic from a specific source IP
address is permitted or denied.
npu(config-ext-nacl)#permit
icmp host 1.1.1.1
npu(config-ext-nacl)#deny
icmp host 1.1.1.1
<network-s
rc-ip>
<mask>
Indicates that incoming ICMP
traffic is to be permitted or
denied for a particular subnet.
npu(config-ext-nacl)#permit
icmp 1.1.1.0 255.255.255.0
npu(config-ext-nacl)#deny
icmp host 1.1.1.0
255.255.255.0