ICMP

Match specific ICMP packet attributes.

Properties

ICMP type

Match on specific ICMP packet types.

OptionLabelDescription
echo-replyEcho replyMatch ICMP type, echo replay packets.
destination-unreachableDestination unreachableMatch ICMP type, destination unreachable packets.
source-quenchSource quenchMatch ICMP type, source quench packets.
redirectRedirectMatch ICMP type, redirect packets.
echo-requestEcho requestMatch ICMP type, echo request packets.
time-exceededTime exceededMatch ICMP type, time exceeded packets.
parameter-problemParameter problemMatch ICMP type, paramater problem packets.
timestamp-requestTimestamp requestMatch ICMP type, timestamp request packets.
timestamp-replyTimestamp replyMatch ICMP type, timestamp replay packets.
info-requestInfo requestMatch ICMP type, info request packets.
info-replyInfo replyMatch ICMP type, info reply packets.
address-mask-requestAddress mask requestMatch ICMP type, mask request packets.
address-mask-replyAddress mask replyMatch ICMP type, mask reply packets.
router-advertisementRouter advertisementMatch ICMP type, router advertisement packets.
router-solicitationRouter solicitationMatch ICMP type, router solicitation packets.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmp type

ICMP code

Match on ICMP code.

OptionLabelDescription
net-unreachableNetwork unreachableMatch ICMP code, network unreachable.
host-unreachableHost unreachableMatch ICMP code, host unreachable.
prot-unreachableProtocol unreachableMatch ICMP code, protocol unreachable.
port-unreachablePort unreachableMatch ICMP code, port unreachable.
net-prohibitedNetwork prohibitedMatch ICMP code, network prohibited.
host-prohibitedHost prohibitedMatch ICMP code, host prohibited.
admin-prohibitedAdministratively prohibitedMatch ICMP code, administratively prohibited.
  • Data type: string select
  • Configuration
  • Optional

CLI: (cli)> config network flow rule <key> filter <index> icmp code