Troubleshooting Acls - Dell PowerConnect B-RX Configuration Manual

21

Troubleshooting ACLs

TABLE 99
ICMP message type
log
mask-reply
mask-request
net-redirect
net-tos-redirect
net-tos-unreachable
net-unreachable
packet-too-big
parameter-problem
NOTE: This message includes all parameter problems
port-unreachable
precedence-cutoff
protocol-unreachable
reassembly-timeout
redirect
NOTE: This includes all redirects.
router-advertisement
router-solicitation
source-host-isolated
source-quench
source-route-failed
time-exceeded
timestamp-reply
timestamp-request
ttl-exceeded
unreachable
NOTE: This includes all unreachable messages
Troubleshooting ACLs
Use the following methods to troubleshoot an ACL:
•
•
560
ICMP message types and codes (Continued)
To determine whether an ACL entry is correctly matching packets, add the log option to the ACL
entry, then reapply the ACL. This forces the device to send packets that match the ACL entry to
the CPU for processing. The log option also generates a Syslog entry for packets that are
permitted or denied by the ACL entry.
To determine whether the issue is specific to fragmentation, remove the Layer 4 information
(TCP or UDP application ports) from the ACL, then reapply the ACL.
Type Code
18 0
17 0
5 0
5 2
3 11
3 0
3 4
12 0
3 3
3 15
3 2
11 1
5 x
9 0
10 0
3 8
4 0
3 5
11 x
14 0
13 0
11 0
3 x
BigIron RX Series Configuration Guide
53-1001810-01