User manual
• Code 4: Cannot Fragment
• Code 5: Source Route Failed
• Redirect: the source is told that there is a better route for a particular packet. Codes assigned are
as follows:
• Code 0: Redirect datagrams for the network
• Code 1: Redirect datagrams for the host
• Code 2: Redirect datagrams for the Type of Service and the network
• Code 3: Redirect datagrams for the Type of Service and the host
• Parameter Problem: identifies an incorrect parameter on the datagram.
• Echo Reply: the reply from the destination which is sent as a result of the Echo Request.
• Source Quenching: the source is sending data too fast for the receiver, the buffer has filled up.
• Time Exceeded: the packet has been discarded as it has taken too long to be delivered.
3.2.4. Custom IP Protocol Services
Services that run over IP and perform application/transport layer functions can be uniquely
identified by IP protocol numbers. IP can carry data for a number of different protocols. These
protocols are each identified by a unique IP protocol number specified in a field of the IP header, for
example, ICMP, IGMP, and EGP have protocol numbers 1, 2, and 8 respectively.
NetDefendOS supports these types of IP protocols by using the concept of Custom IP Protocol
Services. A Custom IP Protocol service is a service definition giving a name to an IP protocol
number. Some of the common IP protocols, such as IGMP, are already predefined in the
NetDefendOS system configuration.
Similar to the TCP/UDP port ranges described previously, a range of IP protocol numbers can be
used to specify multiple applications for one service.
Tip: IP protocol numbers
The currently assigned IP protocol numbers and references are published by the
Internet Assigned Numbers Authority (IANA) and can be found at
http://www.iana.org/assignments/protocol-numbers.
Example 3.9. Adding an IP Protocol Service
This example shows how to add an IP Protocol Service, with the Virtual Router Redundancy Protocol.
CLI
gw-world:/> add Service ServiceIPProto VRRP IPProto=112
Web Interface
1. Go to Objects > Services > Add > IP protocol service
2. Specify a suitable name for the service, for example VRRP
3. Enter 112 in the IP Protocol control
3.2.4. Custom IP Protocol Services Chapter 3. Fundamentals
82