Zte ZXR10 5250 Series - Ingress-Acl Extend Rule Type-Icmp

Chapter4ServiceConguration
ParameterDescription
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskusedforsources.Itisa32-bitIPaddressexpressed
indotteddecimalnotation.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itisa32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itisa32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0
dscp<0-63>
ThisruleisonlyvalidformessageswiththespeciedDSCP
value.Ignorethisruleforothermessages.Therangeofthe
DifferentiatedServicesCodePoint(DSCP)valueis0to63.
fragment
Thisruleisonlyvalidforfragmentmessages.Fornon-fragment
messages,thisruleisignored.
Guidelines
TheIP-protocolrulecanmatchIPv4protocoleldswithspeciedsourceIPaddresses,
anysourceIPaddress,specieddestinationIPaddresses,anydestinationIPaddress,
DSCPelds,orIPfragmentelds.
4.13.13ingress-aclextendruletype-icmp
Purpose
ThiscommandsetstherulethattheextendedingressACLisusedtomatchICMP
messages.
CommandMode
ExtendedingressACLcongurationmode
Syntax
rule<1-500>{permit|deny}icmp{<source-ipaddr><sip-mask>|any}{<destination-ipaddr><di
p-mask>|any}[icmp-type<0-254><icmp-code>][dscp<0-63>][fragment]
4-221
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential