Alcatel-Lucent 7705 - Page 353

Filter Policies
7705 SAR OS Router Configuration Guide 353
icmp-type
Syntax icmp-type icmp-type
no icmp-type
Context config>filter>ip-filter>entry>match
config>filter>ipv6-filter>entry>match
Description This command configures matching on the ICMP type field in the ICMP header of an IPv4 or IPv6
packet as a filter match criterion.
This option is only meaningful if the protocol match criteria specifies ICMP (1).
The no form of the command removes the criterion from the match entry.
Default no icmp-type
Parameters icmp-type — the ICMP type values that must be present to match
Values 0 to 255 (values can be expressed in decimal, hexadecimal, or
binary – DHB)
keywords - none | echo-reply | dest-unreachable | echo-request |
time-exceeded | parameter-problem
ip-option
Syntax ip-option ip-option-value [ip-option-mask]
no ip-option
Context config>filter>ip-filter>entry>match
Description This command configures matching packets with a specific IP option or a range of IP options in the IP
header as an IP filter match criterion.
The option type octet contains three fields:
• 1 bit copied flag (copy options in all fragments)
• 2 bits option class
• 5 bits option number
The no form of the command removes the match criterion.
This command applies to IPv4 filters only.
Default no ip-option
Parameters ip-option-value — the 8-bit option type (can be entered using decimal, hexadecimal, or binary
formats). The mask is applied as an AND to the option byte and the result is compared with
the option value.