Operation Manual – ACL
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
ACL Configuration
1-11
Note:
When advanced ACLs are applied to ports of the H3C S3600 series Ethernet switches,
only the rules configured with the operator argument specified as eq are valid.
If the protocol type is ICMP, you can also define the information listed in Table 1-10.
Table 1-10 ICMP-specific ACL rule information
Parameter Type Function Description
icmp-type
icmp-type
icmp-code
Type and
message
code
information
of ICMP
packets
Specifies the
type and
message code
information of
ICMP packets in
the rule
icmp-type: ICMP message
type, ranging from 0 to 255
icmp-code: ICMP message
code, ranging from 0 to 255
If the protocol type is ICMP, you can also just input the ICMP message name after the
icmp-type keyword.
Table 1-11 lists some common ICMP messages.
Table 1-11 ICMP messages
Name ICMP type ICMP code
echo Type=8 Code=0
echo-reply Type=0 Code=0
fragmentneed-DFset Type=3 Code=4
host-redirect Type=5 Code=1
host-tos-redirect Type=5 Code=3
host-unreachable Type=3 Code=1
information-reply Type=16 Code=0
information-request Type=15 Code=0
net-redirect Type=5 Code=0
net-tos-redirect Type=5 Code=2
net-unreachable Type=3 Code=0
parameter-problem Type=12 Code=0
port-unreachable Type=3 Code=3
protocol-unreachable Type=3 Code=2
reassembly-timeout Type=11 Code=1
source-quench Type=4 Code=0