22
Parameters Function Description
icmp-message }
The icmp-message argument specifies a message name.
Supported ICMP message names and their corresponding
type and code values are listed in Table 10.
Table 10 ICMP message names supported in IPv4 advanced ACL rules
ICMP message name ICMP message type ICMP message code
echo 8 0
echo-reply 0 0
fragmentneed-DFset 3 4
host-redirect 5 1
host-tos-redirect 5 3
host-unreachable 3 1
information-reply 16 0
information-request 15 0
net-redirect 5 0
net-tos-redirect 5 2
net-unreachable 3 0
parameter-problem 12 0
port-unreachable 3 3
protocol-unreachable 3 2
reassembly-timeout 11 1
source-quench 4 0
source-route-failed 3 5
timestamp-reply 14 0
timestamp-request 13 0
ttl-exceeded 11 0
Usage guidelines
Within an ACL, the permit or deny statement of each rule must be unique. If the rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, the rule will not be
created or changed.
You can edit ACL rules only when the match order is config.
If an IPv4 advanced ACL is used for QoS traffic classification or packet filtering in a VXLAN network,
the ACL matches packets as follows:
• The ACL matches outgoing VXLAN packets by outer IPv4 header information on a VTEP.
• The ACL matches incoming VXLAN packets by outer IPv4 header information on an
intermediate transport device.
• The ACL matches de-encapsulated incoming VXLAN packets by IPv4 header information on a
VTEP.
To view the existing IPv4 basic and advanced ACL rules, use the display acl all command.
The rule ID is required in the undo rule rule-id command.
To Next Page
Loading...
