Table of Contents
Advertisement
Help Messages
icmp-type:
icmp-code:
ip-tos:
dscp
Action Modifier Selection Panel
This panel allows you to select from a list of action modifiers. If the match condition is evaluated TRUE
then the action modifiers specified are executed. You have a choice of several action modifiers:
count:
Increments the counter named in the action modifier (ingress only). A number of packet statistics are
gathered by the XOS kernel. To allow you to use these statistics in CLEAR-Flow expressions, these
kernel counters are now available for use with CLEAR-Flow. Most of the counter names are based
directly on well known names from common kernel structures and MIBs. The names are modified from
their familiar form by prepending the characters sys_ to the counter names.
Available Counters:
sys_IpInReceives - The total number of input IP packets received from interfaces, including those
received in error.
sys_IpInHdrErrors - The number of input IP packets discarded due to errors in their IP headers,
including bad checksums, version number mismatch, other format errors, timeto- live exceeded, errors
discovered in processing their IP options, etc.
sys_IpInAddrErrors - The number of input IP packets discarded because the IP address in their IP
header's destination field was not a valid address to be received at this entity. This count includes
invalid addresses (for example, 0.0.0.0) and addresses of unsupported Classes (for example, Class E).
70
ICMP type field. Normally, you specify this match in conjunction with the protocol match
statement. In place of the numeric value, you can specify one of the following text synonyms
(the field values are also listed): echo-reply(0), echorequest( 8), info-reply(16), info-request(15),
mask-request(17), mask-reply(18), parameter-problem(12), redirect(5), routeradvertisement( 9),
router-solicit(10), source-quench(4), timeexceeded( 11), timestamp(13), timestamp-reply(14), or
unreachable(3).
ICMP code field. This value or keyword provides more specific information than the icmp-type.
Because the value's meaning depends upon the associated icmp-type, you must specify the
icmp-type along with the icmp-code. In place of the numeric value, you can specify one of the
following text synonyms (the field values also listed); the keywords are grouped by the ICMP
type with which they are associated: Parameter-problem: ip-header-bad(0), required-option-
missing(1) Redirect: redirect-for-host (1), redirect-for-network (2), redirect-for-tosand- host (3),
redirect-for-tos-and-net (2) Time-exceeded: ttl-eq-zero-during-reassembly(1), ttl-eq-zero-during-
transit(0) Unreachable: communication-prohibited-by-filtering(13), destination-hostprohibited(
10), destination-host-unknown(7), destinationnetwork- prohibited(9), destination-network-
unknown(6), fragmentation-needed(4), host-precedence-violation(14), hostunreachable( 1), host-
unreachable-for-TOS(12), networkunreachable( 0), network-unreachable-for-TOS(11),
portunreachable( 3), precedence-cutoff-in-effect(15), protocolunreachable( 2), source-host-
isolated(8), source-route-failed(5)
IP TOS field. In place of the numeric value, you can specify one of the following text synonyms
(the field values are also listed): minimize-delay 16 (0x10), maximize-reliability 4(0x04),
minimize-cost2 (0x02), and normal-service 0(0x00).
Differentiated Service Code Point. The DiffServ protocol uses the type of service (TOS) byte in
the IP header, and the most significant six bits of this type form the DSCP. In place of the
numeric value, you can specify one of the following text synonyms (the field values are also
listed): The Expedited Forwarding RFC defines one code point: ef(46) The Assured Forwarding
RFC defines 4 classes, with 3 drop precedences in each class, for a total of 12 code points:
af11(10), af12(12), af13(14), af21(18), af22(20), af23(22), af31(26), af32(28),af33(30), af41(34),
af42(36), af43(38).
Extreme Networks Policy Manager (EPM) 1.2 User Guide
Advertisement
Table of Contents
