Zte ZXR10 5250 Series - Page 321

Chapter4ServiceConguration
ParameterDescription
ParameterDescription
<1-500>Rulenumber.
permitIftheconditionmatches,accessispermitted.
denyIftheconditionmatches,accessisdenied.
icmp
ThisruleonlymatchesICMPmessage.Non-ICMPmessage
ignoresthisrule.
<source-ipaddr>
IPaddressofthesourcenetworkorhosttransmittingpackets.Itis
a32-bitIPaddressexpressedindotteddecimalnotation.
<sip-mask>
Sourcemaskandusedforsource.Itis32-bitIPaddress
expressedindotteddecimalnotation.
any(rst)
Theanykeywordisusedastheabbreviationofthesource0.0.0.0
andthesourcemask0.0.0.0.
<destination-ipaddr>
Destinationnetworkorhostofthetransmittedpacket.Itis32-bit
IPaddressexpressedindotteddecimalnotation.
<dip-mask>
Destinationmaskusedfordestination.Itis32-bitIPaddress
expressedindotteddecimalnotation.
any(second)
Theanykeywordisusedastheabbreviationofthedestination
0.0.0.0andthedestinationmask0.0.0.0.
icmp-type<0-254>
Thisruleisonlyvalidforthemessagewiththespeciedicmp-type
value.Ignorethisruleforothermessages.Therangeoficmp-type
is0to254.
Theicmp-typeparameterwillresolvesomeknownicmptypes.
Alsothetypenumbercanbedirectlyinputted.
<icmp-code>
Thisruleisonlyvalidforthemessagewiththespecied
<icmp-code>value.Ignorethisruleforothermessages.Therange
of<icmp-code>is0to254.
dscp<0-63>
ThisruleisonlyvalidforthemessagewiththespeciedDSCP
value.Ignorethisruleforothermessages.TherangeofDSCP
is0to63.
fragment
Thisruleisonlyvalidforthefragmentmessage.Non-fragment
messagesignorethisrule.
Guidelines
TheICMPrulecanmatchICMPpacketswithspeciedsourceIPaddresses,anysourceIP
address,specieddestinationIPaddresses,anydestinationIPaddress,ICMP-typeelds,
ICMP-codeelds,DSCPelds,orIPfragmentelds.
4-263
SJ-20131111172707-003|2013-11-27(R1.0)ZTEProprietaryandCondential