[154227] in North American Network Operators' Group
Re: IPV6 ACL command to block ICMPv6 Type and code
daemon@ATHENA.MIT.EDU (Jimmy Hess)
Fri Jun 29 01:30:16 2012
In-Reply-To: <4FED3476.9010905@apnic.net>
Date: Fri, 29 Jun 2012 00:29:32 -0500
From: Jimmy Hess <mysidia@gmail.com>
To: nurul@apnic.net
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 6/28/12, Roman <nurul@apnic.net> wrote:
> Hi,
> unreachable). All other code will be permited.
> In my router I can see these:
>
> Router(config-ipv6-acl)#deny icmp any any destination-unreachable ?
...
destination-unreachable in this case pertains to type #1 code #3
try
deny icmp any any no-admin
or
deny icmp any any 1 1
--
-JH
