Configuring ICMP Conditions (SRC CLI)

Use the following configuration statements to add ICMP conditions to a classify-traffic condition:


            
               policies group  name  list  name  rule  name  traffic-condition  name  icmp-condition
                  {
               
               protocol  protocol ; 
               
               protocol-operation  protocol-operation ; 
               
               ip-flags  ip-flags ; 
               
               ip-flags-mask  ip-flags-mask ; 
               
               fragment-offset  fragment-offset ; 
               
               packet-length  packet-length ;
               
               icmp-type  icmp-type ; 
               
               icmp-code  icmp-code ; 
               
               }

Because the protocol is already set to ICMP, do not change the protocol or protocol-operation options.

To add ICMP conditions to a classify-traffic condition:

From configuration mode, enter the ICMP configuration. For example:


                  
                     user@host# edit policies group bod list input
                           rule pr traffic-condition ctc  icmp-condition

(Optional) Configure the value of the IP flags field in the IP header.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set ip-flags  ip-flags

(Optional) Configure the mask that is associated with the IP flag.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set ip-flags-mask  ip-flags-mask

(Optional) Configure the value of the fragment offset field.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set fragment-offset  fragment-offset

(Optional) Configure the packet length on which to match. The length refers only to the IP packet, including the packet header, and does not include any layer 2 encapsulation overhead.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set packet-length  packet-length

(Optional) Configure the ICMP packet type on which to match. The packet type must be supported by the router or CMTS device.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set icmp-type  icmp-type

(Optional) Configure the ICMP code on which to match. The ICMP code must be supported by the router or CMTS device.


                  
                     [edit policies group bod list input rule pr traffic-condition
                        ctc icmp-condition]
                     
                     user@host# set icmp-code  icmp-code

(Optional) Verify the ICMP condition configuration.

[edit policies group bod list input rule pr traffic-condition ctc icmp-condition]
user@host# show 
protocol icmp;
protocol-operation 1;
ip-flags ipFlags;
ip-flags-mask ipFlagsMask;
fragment-offset ipFragOffset;
icmp-type icmpType;
icmp-code icmpCode;

Configuring ICMP Conditions (SRC CLI)

Related Topics