Nokia 7330 - Fragment; Icmp-Code; Table 46 Fragment Command; Table 47 Icmp-Code Command

"FD 100/320Gbps NT and FX NT IHub System
Basics, Management and OAM Guide"
Security
Issue: 10 3HH-11982-AAAA-TQZZA 57
4.4.2.10 fragment
Table 46 fragment command
4.4.2.11 icmp-code
Table 47 icmp-code command
Description This command configures a destination TCP or UDP port number for an CPU filter match
criterion.
The no form of the command removes the destination port match criterion.
Default None
Parameters port-number — The destination port number to be used as a match criteria expressed as a
decimal, hex or binary integers.
Values: 0 — 65535
mask— Mask used to specify a range of source port numbers as the match criterion.
Item Description
(2 of 2)
Item Description
Syntax [no] fragment {true | false}
Context configure>system>security>cpu-filter>ip-filter>entry>match
Description Configures fragmented or non-fragmented IP packets as an CPU filter match criterion.
The no form of the command removes the match criterion.
Default False
Parameters true — Configures a match on all fragmented IP packets. A match will occur for all packets
that have either the MF (more fragment) bit set OR have the Fragment Offset field of the IP
header set to a non-zero value.
false — Configures a match on all non-fragmented IP packets. Non-fragmented IP packets
are packets that have the MF bit set to zero and have the Fragment Offset field also set to zero.
Item Description
Syntax [no] icmp-code icmp-code
Context configure>system>security>cpu-filter>ip-filter>entry>match
Description Configures matching on ICMP code field in the ICMP header of an IP packet as a filter match
criterion.
This option is only meaningful if the protocol match criteria specifies ICMP (1).
The no form of the command removes the criterion from the match entry.
(1 of 2)