ZyXEL Communications UAG Series - 49.9 ICMP Filter

Chapter 49 System Remote Management
UAG CLI Reference Guide
258
The following command sets the password (secret) for read-write (rw) access.
The following command sets the IP address of the host that receives the SNMP notifications to
172.16.15.84 and the password (sent with each trap) to qwerty.
49.9 ICMP Filter
The ip icmp-filter commands are obsolete. See Chapter 27 on page 151 to configure firewall
rules for ICMP traffic going to the UAG to discard or reject ICMP packets destined for the UAG.
Configure the ICMP filter to help keep the UAG hidden from probing attempts. You can specify
whether or not the UAG is to respond to probing for unused ports.
You must use the
configure terminal command to enter the configuration mode before you
can use these commands.
Router# configure terminal
Router(config)# snmp-server community secret rw
Router# configure terminal
Router(config)# snmp-server host 172.16.15.84 qwerty
Table 159 Command Summary: ICMP Filter
COMMAND DESCRIPTION
[no] ip icmp-filter activate Turns the ICMP filter on or off.
ip icmp-filter rule {<1..32>|append|insert
<1..32>} access-group {ALL|ADDRESS_OBJECT}
zone {ALL|ZONE_OBJECT} icmp-type {ALL |echo-
reply |destination-unreachable |source-
quench|redirect|echo-request| router-
advertisement|router-solicitation |time-
exceeded | parameter-problem| timestamp-
request|timestamp-reply| address-mask-request|
address-mask-reply} action {accept|deny}
Sets an ICMP filter rule.
ADDRESS_OBJECT: The name of the IP address (group) object.
You may use 1-31 alphanumeric characters, underscores(
_), or
dashes (-), but the first character cannot be a number. This value
is case-sensitive.
ZONE_OBJECT: The name of the zone. You may use 1-31
alphanumeric characters, underscores(
_), or dashes (-), but the
first character cannot be a number. This value is case-sensitive.
no ip icmp-filter rule <1..64> Deletes an ICMP filter rule.
ip icmp-filter rule move <1..64> to <1..64> Changes the index number of an ICMP filter rule.
show ip icmp-filter status Displays ICMP filter settings.