System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 109
Parameters icmp-type — icmp-type-number or icmp-type-keyword
icmp-type-number — the ICMP type number in decimal, hexadecimal, or binary, to be
used as a match criterion
Values [0 to 255]D
[0x0 to 0xFF]H
[0b0 to 0b11111111]B
icmp-type-keyword:
icmp-type-keyword — the ICMP type keyword to be used as a match criterion
Values For IPv4 filter: none, echo-reply, dest-unreachable,
source-quench, redirect, echo-request, router-advt,
router-selection, time-exceeded, parameter-problem,
timestamp-request, timestamp-reply, addr-mask-request,
addr-mask-reply, photuris
For IPv6 filter: none, dest-unreachable, packet-too-big,
time-exceeded, parameter-problem, echo-request, echo-reply,
multicast-listen-query, multicast-listen-report,
multicast-listen-done, router-solicitation, router-advt,
neighbor-solicitation, neighbor-advertisement,
redirect-message, router-renumbering, icmp-node-info-query,
icmp-node-info-resp, inv-nd-solicitation, inv-nd-adv-message,
multicast-listener-report-v2, home-agent-ad-request,
home-agent-ad-reply, mobile-prefix-solicitation,
mobile-prefix-advt, cert-path-solicitation, cert-path-advt,
multicast-router-advt, multicast-router-solicitation,
multicast-router-termination, fmipv6, rpl-control,
ilnpv6-locator-update, duplicate-addr-request,
duplicate-addr-confirmation
ip-option
Syntax ip-option ip-option-value [ip-option-mask]
no ip-option
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures matching packets with a specific IP option or a range of IP options
in the IP header as an IP filter match criterion.
The option type octet contains 3 fields:
• 1 bit copied flag (copy options in all fragments)
• 2 bits option class
• 5 bits option number
The no form of the command removes the match criterion.
To Next Page
Loading...
