Chapter 52 System Remote Management
ZyWALL / USG (ZLD) CLI Reference Guide
337
52.9 ICMP Filter
The ip icmp-filter commands are obsolete. See Chapter 25 on page 163 to configure secure
policy rules for ICMP traffic going to the ZyWALL / USG to discard or reject ICMP packets destined
for the ZyWALL / USG.
Configure the ICMP filter to help keep the ZyWALL / USG hidden from probing attempts. You can
specify whether or not the ZyWALL / USG is to respond to probing for unused ports.
You must use the
configure terminal command to enter the configuration mode before you
can use these commands.
Table 207 Command Summary: ICMP Filter
COMMAND DESCRIPTION
[no] ip icmp-filter activate Turns the ICMP filter on or off.
ip icmp-filter rule {<1..32>|append|insert
<1..32>} access-group {ALL|ADDRESS_OBJECT}
zone {ALL|ZONE_OBJECT} icmp-type {ALL |echo-
reply |destination-unreachable |source-
quench|redirect|echo-request| router-
advertisement|router-solicitation |time-
exceeded | parameter-problem| timestamp-
request|timestamp-reply| address-mask-request|
address-mask-reply} action {accept|deny}
Sets an ICMP filter rule.
ADDRESS_OBJECT: The name of the IP address (group) object.
You may use 1-31 alphanumeric characters, underscores(
_), or
dashes (-), but the first character cannot be a number. This value
is case-sensitive.
ZONE_OBJECT: The name of the zone. You may use 1-31
alphanumeric characters, underscores(
_), or dashes (-), but the
first character cannot be a number. This value is case-sensitive.
no ip icmp-filter rule <1..64> Deletes an ICMP filter rule.
ip icmp-filter rule move <1..64> to <1..64> Changes the index number of an ICMP filter rule.
show ip icmp-filter status Displays ICMP filter settings.
To Next Page
Loading...
