BigIron RX Series Configuration Guide 571
53-1002253-01
Troubleshooting ACLs
21
Troubleshooting ACLs
Use the following methods to troubleshoot an ACL:
• To determine whether an ACL entry is correctly matching packets, add the log option to the ACL
entry, then reapply the ACL. This forces the device to send packets that match the ACL entry to
the CPU for processing. The log option also generates a Syslog entry for packets that are
permitted or denied by the ACL entry.
Information-reply 16 0
log
mask-reply 18 0
mask-request 17 0
net-redirect 5 0
net-tos-redirect 5 2
net-tos-unreachable 3 11
net-unreachable 3 0
packet-too-big 3 4
parameter-problem
NOTE: This message includes all parameter problems
12 0
port-unreachable 3 3
precedence-cutoff 3 15
protocol-unreachable 3 2
reassembly-timeout 11 1
redirect
NOTE: This includes all redirects.
5x
router-advertisement 9 0
router-solicitation 10 0
source-host-isolated 3 8
source-quench 4 0
source-route-failed 3 5
time-exceeded 11 x
timestamp-reply 14 0
timestamp-request 13 0
ttl-exceeded 11 0
unreachable
NOTE: This includes all unreachable messages
3x
TABLE 103 ICMP message types and codes (Continued)
ICMP message type Type Code
To Next Page
Loading...
