H3C SOHO IE4300, Command Reference Manual

Page: 1692 / 3296

23
icmp-code
|
icmp-message
}
The
icmp-message
argument specifies a message
name. Supported ICMP message names and their
corresponding type and code values are listed in
Table 10 .
Table 10 ICMP message names supported in IPv4 advanced ACL rules
ICMP message name ICMP message type ICMP message code
echo 8 0
echo-reply 0 0
fragmentneed-DFset 3 4
host-redirect 5 1
host-tos-redirect 5 3
host-unreachable 3 1
information-reply 16 0
information-request 15 0
net-redirect 5 0
net-tos-redirect 5 2
net-unreachable 3 0
parameter-problem 12 0
port-unreachable 3 3
protocol-unreachable 3 2
reassembly-timeout 11 1
source-quench 4 0
source-route-failed 3 5
timestamp-reply 14 0
timestamp-request 13 0
ttl-exceeded 11 0
Usage guidelines
Within an ACL, the permit or deny statement of each rule must be unique. If the rule you are creating
or editing has the same deny or permit statement as another rule in the ACL, the rule will not be
created or changed.
You can edit ACL rules only when the match order is
config
.
To view the existing IPv4 basic and advanced ACL rules, use the
display acl all
command.
The
undo rule rule-id
command without any optional parameters deletes an entire rule. If you
specify optional parameters, the undo rule rule-id command deletes the specified attributes for
the rule.
The undo rule { deny | permit } command can only be used to delete an entire rule. You must
specify all the attributes of the rule for the command.
Examples
# Create an IPv4 advanced ACL rule to permit TCP packets with the destination port 80 from
129.9.0.0/16 to 202.38.160.0/24.