Table of Contents
Advertisement
Security Command Reference
icmp-type
Syntax
icmp-type icmp-type
no icmp-type
Context
config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description
This command configures matching on an ICMP type field in the ICMP header of an IP packet as an
IP filter match criterion.
The ICMP protocol must be configured using the match command before this filter can be configured.
The no form of the command removes the criterion from the match entry.
Default
no icmp-type
Parameters
icmp-type — specifies the ICMP type values that must be present to match
ip-option
Syntax
ip-option ip-option-value [ip-option-mask]
no ip-option
Context
config>system>security>cpm-filter>ip-filter>entry>match
Description
This command configures matching packets with a specific IP option or a range of IP options in the IP
header as an IP filter match criterion.
The option type octet contains 3 fields:
The no form of the command removes the match criterion.
This command applies to IPv4 filters only.
Default
no ip-option
Parameters
ip-option-value — the 8-bit option type (can be entered using decimal, hexadecimal, or binary
98
Values
0 to 255 (values can be expressed in decimal, hexadecimal, or
binary – DHB)
keywords - none | echo-reply | dest-unreachable | echo-request |
time-exceeded | parameter-problem
•
1 bit copied flag (copy options in all fragments)
•
2 bits option class
•
5 bits option number
formats). The mask is applied as an AND to the option byte and the result is compared with
the option value.
7705 SAR OS System Management Guide
Advertisement
Table of Contents
