Security
7705 SAR OS System Management Guide Page 95
icmp-code
Syntax icmp-code icmp-code
no icmp-code
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures matching on an ICMP code field in the ICMP header of an IP packet as an
IP filter match criterion.
The ICMP protocol must be configured using the match command before this filter can be
configured.
The no form of the command removes the criterion from the match entry.
Default no icmp-code
Parameters icmp-code — specifies the ICMP code values that must be present to match
Values 0 to 255 (values can be expressed in decimal, hexadecimal, or binary – DHB)
keywords - none | network-unreachable | host-unreachable | protocol-unreachable |
port-unreachable | fragmentation-needed | dest-network-unknown |
dest-host-unknown
icmp-type
Syntax icmp-type icmp-type
no icmp-type
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures matching on an ICMP type field in the ICMP header of an IP packet as an
IP filter match criterion.
The ICMP protocol must be configured using the match command before this filter can be
configured.
The no form of the command removes the criterion from the match entry.
Default no icmp-type
Parameters icmp-type — specifies the ICMP type values that must be present to match
Values 0 to 255 (values can be expressed in decimal, hexadecimal, or binary – DHB)
keywords - none | echo-reply | dest-unreachable | echo-request | time-exceeded |
parameter-problem
To Next Page
Loading...
