Egress-Acl Extend Rule Type-Icmp - Zte ZXR10 5250 Series Command Reference Manual

ZXR10 5250 Series Command Reference
Parameter
<source-ipaddr>
<sip-mask>
any (first)
<destination-ipaddr>
<dip-mask>
any (second)
dscp <0-63>
fragment
Guidelines
The IP-protocol rule can match IPv4 protocol fields with specified source IP addresses,
any source IP address, specified destination IP addresses, any destination IP address,
DSCP fields, or IP fragment fields.

4.13.50 egress-acl extend rule type-icmp

Purpose
This command sets the rule that the extended ingress ACL is used to match ICMP
message.
Command Mode
Extended egress ACL configuration mode
Syntax
rule <1-500>{permit | deny} icmp {<source-ipaddr><sip-mask>| any}{<destination-ipaddr><di
p-mask>| any}[icmp-type <0-254><icmp-code>][dscp <0-63>][fragment]
SJ-20131111172707-003|2013-11-27 (R1.0)
Description
IP address of the source network or host transmitting packets. It is
a 32-bit IP address expressed in dotted decimal notation.
Source mask used for sources. It is a 32-bit IP address expressed
in dotted decimal notation.
The any keyword is used as the abbreviation of the source 0.0.0.0
and the source mask 0.0.0.0.
Destination network or host of the transmitted packet. It is a 32-bit
IP address expressed in dotted decimal notation.
Destination mask used for destination. It is a 32-bit IP address
expressed in dotted decimal notation.
The any keyword is used as the abbreviation of the destination
0.0.0.0 and the destination mask 0.0.0.0
This rule is only valid for the message with the specified DSCP
value. Ignore this rule for other messages. The range of DSCP
value is 0 to 63.
This rule is only valid for fragment messages. For non-fragment
messages, this rule is ignored.
4-262
ZTE Proprietary and Confidential