Juniper EX9200 Features Manual page 112

VPLS Feature Guide for EX9200 Switches
Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued)
Match Condition
icmp-code message-code
icmp-code-except
message-code
icmp-code number
icmp-code-except number
icmp-type number
94
Description
Match the ICMP message code field.
If you configure this match condition, we recommend that you also configure the
or match condition in the same term.
icmp next-header icmp6
If you configure this match condition, you must also configure the
condition in the same term. An ICMP message code provides more specific information than an
ICMP message type, but the meaning of an ICMP message code is dependent on the associated
ICMP message type.
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed). The keywords are grouped by the ICMP type with which they are associated:
parameter-problem: ip6-header-bad
(2)
time-exceeded: ttl-eq-zero-during-reassembly
destination-unreachable:
address-unreachable
(0),
no-route-to-destination
Do not match the ICMP message code field. For details, see the
(MX Series routers and EX Series switches only) Match the ICMP message code field.
If you configure this match condition, we recommend that you also configure the
or match condition in the same term.
ip-protocol icmp6
If you configure this match condition, you must also configure the
condition in the same term. An ICMP message code provides more specific information than an
ICMP message type, but the meaning of an ICMP message code is dependent on the associated
ICMP message type.
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed). The keywords are grouped by the ICMP type with which they are associated:
parameter-problem:
ip6-header-bad
(2)
time-exceeded:
ttl-eq-zero-during-reassembly
destination-unreachable:
address-unreachable
no-route-to-destination (0),
(MX Series routers and EX Series switches only) Do not match on the ICMP code field. For details,
see the match condition.
icmp-code
(MX Series routers and EX Series switches only) Match the ICMP message type field.
If you configure this match condition, we recommend that you also configure the
, , or
icmp ip-protocol icmp6 ip-protocol icmpv6
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed): destination-unreachable
membership-query (130), membership-report
(136),
neighbor-advertisement
(139),
node-information-request
(134),
router-advertisement router-renumbering
(0), unrecognized-next-header
(1), ttl-eq-zero-during-transit
(3),
administratively-prohibited
(4)
port-unreachable
(0),
unrecognized-next-header
(1),
ttl-eq-zero-during-transit
(3),
administratively-prohibited
port-unreachable (4)
match condition in the same term.
(1), echo-reply (129),
(131), membership-termination
(135),
neighbor-solicit node-information-reply
(2),
packet-too-big parameter-problem
(138),
router-solicit
Copyright © 2016, Juniper Networks, Inc.
next-header
icmp-type message-type match
(1), unrecognized-option
(0)
(1),
icmp-code match condition.
ip-protocol icmp
match
icmp-type message-type
(1),
unrecognized-option
(0)
(1),
ip-protocol
echo-request (128),
(132),
(140),
(4), (137),
redirect
(133), or
time-exceeded
(3).