Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3342

Complete Software Guide for Junos
Table 416: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition Description
IP fragmentation flags, specified in symbolic
fragment-flags
or hexadecimal formats. You can specify
fragment-flags
one of the following options:
dont-fragment (0x4000), more-fragments
(0x2000), or reserved (0x8000)
ICMP code field. This value or option
icmp-code number
provides more specific information than
icmp-type
depends upon the associated
you must specify
icmp-code
you can specify one of the following text
synonyms (the field values are also listed).
The options are grouped by the ICMP type
with which they are associated:
3238
®
OS for EX Series Ethernet Switches, Release 10.4
. Because the value's meaning
icmp-type
along with
icmp-type
. In place of the numeric value,
—
parameter-problem ip-header-bad (0)
required-option-missing (1)
redirect — redirect-for-host (1) ,
redirect-for-network (0) ,
,
redirect-for-tos-and-host (3)
redirect-for-tos-and-net (2)
—
time-exceeded ttl-eq-zero-
,
during-reassembly (1)
ttl-eq-zero-during-transit (0)
unreachable — communication-
prohibited-by-filtering (13) ,
destination-host-prohibited (10)
destination-host-unknown (7)
destination-network-prohibited (9)
destination-network-unknown (6)
,
fragmentation-needed (4)
host-precedence-violation (14)
host-unreachable (1) ,
host-unreachable-for-TOS (12)
,
network-unreachable (0)
network-unreachable-for-TOS (11)
,
port-unreachable (3)
precedence-cutoff-in-effect (15)
,
protocol-unreachable (2)
source-host-isolated (8) ,
source-route-failed (5)
Supported Platforms and Bind Points
Ingress
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—not
supported
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
,
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
,
,
,
,
,
,
,
,
,
Egress
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX4500—not
supported
EX8200—not
supported
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—VLANs and
Layer 3 interfaces
EX4500—VLANs and
Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
Copyright © 2010, Juniper Networks, Inc.