H3C IE4300 Command Reference Manual page 1692

icmp-code
icmp-message
Table 10 ICMP message names supported in IPv4 advanced ACL rules
ICMP message name
echo
echo-reply
fragmentneed-DFset
host-redirect
host-tos-redirect
host-unreachable
information-reply
information-request
net-redirect
net-tos-redirect
net-unreachable
parameter-problem
port-unreachable
protocol-unreachable
reassembly-timeout
source-quench
source-route-failed
timestamp-reply
timestamp-request
ttl-exceeded
Usage guidelines
Within an ACL, the permit or deny statement of each rule must be unique. If the rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, the rule will not be
created or changed.
You can edit ACL rules only when the match order is
To view the existing IPv4 basic and advanced ACL rules, use the
The
undo rule rule-id
specify optional parameters, the
the rule.
The
undo rule { deny | permit }
specify all the attributes of the rule for the command.
Examples
# Create an IPv4 advanced ACL rule to permit TCP packets with the destination port 80 from
129.9.0.0/16 to 202.38.160.0/24.
|
}
command without any optional parameters deletes an entire rule. If you
undo rule rule-id
icmp-message
The
name. Supported ICMP message names and their
corresponding type and code values are listed in
ICMP message type
8
0
3
5
5
3
16
15
5
5
3
12
3
3
11
4
3
14
13
11
config
command deletes the specified attributes for
command can only be used to delete an entire rule. You must
23
argument specifies a message
ICMP message code
0
0
4
1
3
1
0
0
0
2
0
0
3
2
1
0
5
0
0
0
.
display acl all
Table 10.
command.