Rejection

The response to send on packets rejection.

Reject responses help the sender understand why traffic was blocked. Choose codes that match the policy you want peers to see.

Properties

Reject with ICMP code

The icmp response for IPv4 packet rejection.

OptionLabelDescription
net-unreachableNetwork unreachableReply with an ICMP Network unreachable.
host-unreachableHost unreachableReply with an ICMP Host unreachable.
prot-unreachableProtocol unreachableReply with an ICMP Protocol unreachable.
port-unreachablePort unreachableReply with an ICMP Port unreachable.
net-prohibitedNetwork prohibitedReply with an ICMP Network unreachable.
host-prohibitedHost prohibitedReply with an ICMP Host prohibited.
admin-prohibitedAdministratively prohibitedReply with an ICMP Administratively prohibited.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmp-code

Reject with ICMPv6 code

The icmp response for IPv6 packet rejection.

OptionLabelDescription
no-routeNo routeReply with an ICMPv6 No route.
admin-prohibitedAdministratively prohibitedReply with an ICMPv6 Administratively prohibited.
addr-unreachableAddress unreachableReply with an ICMPv6 Address unreachable.
port-unreachablePort unreachableReply with an ICMPv6 Port unreachable.
policy-failPolicy failureReply with an ICMPv6 Policy failure.
reject-routeRejected routeReply with an ICMPv6 Rejected route.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmpv6-code