Filter
Top Products
2096 CHAPTER 138: IPV4 ACL CONFIGURATION COMMANDS
The following table provides the ICMP messages that you can specify in advanced
IPv4 ACL rules.
Description Use the
rule command to define or modify an advanced IPv4 ACL rule. If the rule
does not exist, it is created first.
Use the
undo rule command to remove an advanced ACL rule or parameters
from the rule.
With the undo rule command, if no parameters are specified, the entire ACL rule
is removed; if other parameters are specified, only the involved information is
removed.
You will fail to create or modify a rule if its permit/deny statement is exactly the
same as another rule. In addition, if the ACL match order is set to auto rather than
config, you cannot modify ACL rules.
Table 548 Parameters for advanced IPv4 ACL rules
Parameter Function Description
icmp-type
{ icmp-type
icmp-code |
icmp-message }
Specifies the
ICMP message
type and code.
The icmp-type argument ranges from 0 to 255.
The icmp-code argument ranges from 0 to 255.
The icmp-message argument specifies a message
name. For available ICMP messages, see Table 549.
Table 549 ICMP messages and their codes
ICMP message Type Code
echo 8 0
echo-reply 0 0
fragmentneed-DFset 3 4
host-redirect 5 1
host-tos-redirect 5 3
host-unreachable 3 1
information-reply 16 0
information-request 15 0
net-redirect 5 0
net-tos-redirect 5 2
net-unreachable 3 0
parameter-problem 12 0
port-unreachable 3 3
protocol-unreachable 3 2
reassembly-timeout 11 1
source-quench 4 0
source-route-failed 3 5
timestamp-reply 14 0
timestamp-request 13 0
ttl-exceeded 11 0