Filter Policies
Router Configuration Guide 553
Description This command configures matching on the ICMP/ICMPv6 type field in the ICMP/ICMPv6 header of
an IPv4 or IPv6 packet as a filter match criterion. An entry containing Layer 4 non-zero match criteria
will not match non-initial (2nd, 3rd, etc.) fragments of a fragmented packet since only the first
fragment contains the Layer 4 information. Similarly an entry containing "icmp-type 0" match
criterion, may match non-initial fragments when the Layer 4 header is not present in a packet fragment
and other match criteria are also met.
The no form of the command removes the criterion from the match entry.
Default no icmp-type
Parameters icmp-type — The ICMP/ICMPv6 type value that must be present to match. Value can be
expressed as a decimal integer, as well as in hexadecimal or binary format, or even using
keywords. The following value shows decimal integer only.
Values 0 to 255
ip-option
Syntax ip-option ip-option-value [ip-option-mask]
no ip-option
Context config>filter>ip-filter>entry>match
Description This command configures matching packets with a specific IP option or a range of IP options in the
first option of the IP header as an IP filter match criterion.
The option-type octet contains 3 fields:
1 bit copied flag (copy options in all fragments)
2 bits option class
5 bits option number
The no form of the command removes the match criterion.
Default no ip-option
Parameters ip-option-value — Enter the 8 bit option-type as a decimal integer, binary, or hexadecimal format.
The mask is applied as an AND to the option byte, the result is compared with the option-
value.
The decimal value entered for the match should be a combined value of the eight bit option
type field and not just the option number. Thus to match on IP packets that contain the Router
Alert option (option number = 20), enter the option type of 148 (10010100).
Values 0 to 255
ip-option-mask — This is optional and may be used when specifying a range of option numbers to
use as the match criteria.
This 8 bit mask can be configured using the following formats:
To Next Page
Loading...
