Alcatel-Lucent 7705 SAR, System Management Manual

Page: 98 / 356

Security Command Reference
98 7705 SAR OS System Management Guide
icmp-type
Syntax icmp-type icmp-type
no icmp-type
Context config>system>security>cpm-filter>ip-filter>entry>match
config>system>security>cpm-filter>ipv6-filter>entry>match
Description
This command configures matching on an ICMP type field in the ICMP header of an IP packet as an
IP filter match criterion.
The ICMP protocol must be configured using the match command before this filter can be configured.
The no form of the command removes the criterion from the match entry.
Default
no icmp-type
Parameters
icmp-type — specifies the ICMP type values that must be present to match
Values
0 to 255 (values can be expressed in decimal, hexadecimal, or
binary – DHB)
keywords - none | echo-reply | dest-unreachable | echo-request |
time-exceeded | parameter-problem
ip-option
Syntax ip-option ip-option-value [ ip-option-mask ]
no ip-option
Context config>system>security>cpm-filter>ip-filter>entry>match
Description This command configures matching packets with a specific IP option or a range of IP options in the IP
header as an IP filter match criterion.
The option type octet contains 3 fields:
• 1 bit copied flag (copy options in all fragments)
• 2 bits option class
• 5 bits option number
The no form of the command removes the match criterion.
This command applies to IPv4 filters only.
Default no ip-option
Parameters ip-option-value — the 8-bit option type (can be entered using decimal, hexadecimal, or binary
formats). The mask is applied as an AND to the option byte and the result is compared with
the option value.