H3C MSR Series

1077
signature detect ipv6-ext-header ext-header-value [ action { { drop | logging } * | none } ]
undo signature detect ipv6-ext-header next-header-value
Default
Signature detection is disabled for all single-packet attacks.
Views
Attack defense policy view
Predefined user roles
network-admin
Parameters
fraggle: Specifies the fraggle attack.
fragment: Specifies the IP fragment attack.
icmp-type: Specifies an ICMP packet attack by the packet type. You can specify the packet type by
a number or a keyword:
• icmp-type-value: Specifies the ICMP packet type in the range of 0 to 255.
• address-mask-reply: Specifies the ICMP address mask reply type.
• address-mask-request: Specifies the ICMP address mask request type.
• destination-unreachable: Specifies the ICMP destination unreachable type.
• echo-reply: Specifies the ICMP echo reply type.
• echo-request: Specifies the ICMP echo request type.
• information-reply: Specifies the ICMP information reply type.
• information-request: Specifies the ICMP information request type.
• parameter-problem: Specifies the ICMP parameter problem type.
• redirect: Specifies the ICMP redirect type.
• source-quench: Specifies the ICMP source quench type.
• time-exceeded: Specifies the ICMP time exceeded type.
• timestamp-reply: Specifies the ICMP timestamp reply type.
• timestamp-request: Specifies the ICMP timestamp request type.
icmpv6-type: Specifies an ICMPv6 packet attack by the packet type. You can specify the packet
type by a number or a keyword.
• icmpv6-type-value: Specifies the ICMPv6 packet type in the range of 0 to 255.
• destination-unreachable: Specifies the ICMPv6 destination unreachable type.
• echo-reply: Specifies the ICMPv6 echo reply type.
• echo-request: Specifies the ICMPv6 echo request type.
• group-query: Specifies the ICMPv6 group query type.
• group-reduction: Specifies the ICMPv6 group reduction type.
• group-report: Specifies the ICMPv6 group report type.
• packet-too-big: Specifies the ICMPv6 packet too big type.
• parameter-problem: Specifies the ICMPv6 parameter problem type.
• time-exceeded: Specifies the ICMPv6 time exceeded type.
impossible: Specifies the IP impossible packet attack.
ip-option: Specifies an IP option. You can specify the IP option by a number or a keyword: