Rejection

The response to send on packets rejection.

Properties

Reject with ICMP code

The icmp response for IPv4 packet rejection.

OptionLabelDescription
net-unreachableNetwork unreachableReply with an ICMP Network unreachable.
host-unreachableHost unreachableReply with an ICMP Host unreachable.
prot-unreachableProtocol unreachableReply with an ICMP Protocol unreachable.
port-unreachablePort unreachableReply with an ICMP Port unreachable.
net-prohibitedNetwork prohibitedReply with an ICMP Network unreachable.
host-prohibitedHost prohibitedReply with an ICMP Host prohibited.
admin-prohibitedAdministratively prohibitedReply with an ICMP Administratively prohibited.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmp-code

Reject with ICMPv6 code

The icmp response for IPv6 packet rejection.

OptionLabelDescription
no-routeNo routeReply with an ICMPv6 No route.
admin-prohibitedAdministratively prohibitedReply with an ICMPv6 Administratively prohibited.
addr-unreachableAddress unreachableReply with an ICMPv6 Address unreachable.
port-unreachablePort unreachableReply with an ICMPv6 Port unreachable.
policy-failPolicy failureReply with an ICMPv6 Policy failure.
reject-routeRejected routeReply with an ICMPv6 Rejected route.
  • Data type: string select
  • Default: admin-prohibited
  • Configuration
  • Required

CLI: (cli)> config network flow rule <key> reject icmpv6-code