ZyXEL Communications ZyWALL 310 - 64.9 ICMP Filter

Chapter 64 System Remote Management
ZyWALL Series CLI Reference Guide
539
The following commands create an SNMPv3 rule and then displays the configured settings.
64.9 ICMP Filter
The ip icmp-filter commands are obsolete. See Chapter 29 on page 222 to configure secure policy
rules for ICMP traffic going to the Zyxel Device to discard or reject ICMP packets destined for the Zyxel
Device.
Configure the ICMP filter to help keep the Zyxel Device hidden from probing attempts. You can specify
whether or not the Zyxel Device is to respond to probing for unused ports.
You must use the
configure terminal command to enter the configuration mode before you can
use these commands.
Router# configure terminal
Router(config)# snmp-server v3user username john authentication md5 privacy
none privilege rw
Router(config)# show snmp-server v3user status
SNMPv3 user profile: 1
username: john
authentication: md5
privacy: none
privilege: rw
Router(config)#
Table 312 Command Summary: ICMP Filter
COMMAND DESCRIPTION
[no] ip icmp-filter activate
Turns the ICMP filter on or off.
ip icmp-filter rule
{<1..32>|append|insert
<1..32>} access-group
{ALL|ADDRESS_OBJECT} zone
{ALL|ZONE_OBJECT} icmp-type
{ALL |echo-reply |destination-
unreachable |source-
quench|redirect|echo-request|
router-advertisement|router-
solicitation |time-exceeded |
parameter-problem| timestamp-
request|timestamp-reply|
address-mask-request| address-
mask-reply} action
{accept|deny}
Sets an ICMP filter rule.
ADDRESS_OBJECT: The name of the IP address (group) object. You
may use 1-31 alphanumeric characters, underscores(
_), or dashes (-
), but the first character cannot be a number. This value is case-
sensitive.
ZONE_OBJECT: The name of the zone. You may use 1-31
alphanumeric characters, underscores(
_), or dashes (-), but the first
character cannot be a number. This value is case-sensitive.
no ip icmp-filter rule <1..64>
Deletes an ICMP filter rule.
ip icmp-filter rule move
<1..64> to <1..64>
Changes the index number of an ICMP filter rule.
show ip icmp-filter status
Displays ICMP filter settings.