Administrator Guide

ICMP Message
Type Keywords
ICMP Message Type Name
mobile-redirect Mobile host redirect
net-redirect Network redirect
net-tos-redirect Network redirect for TOS
net-tos-
unreachable
Network unreachable for TOS
net-unreachable Network unreachable
network-unknown Network unknown
no-room-for-
option
Parameter required but no room
option-missing Parameter required but not present
packet-too-big Fragmentation needed and DF set
parameter-
problem
All parameter problems
port-unreachable Port unreachable
precedence-
unreachable
Precedence cutoff
protocol-
unreachable
Protocol unreachable
reassembly-
timeout
Reassembly timeout
redirect All redirects
router-
advertisement
Router discovery advertisements
router-solicitation Router discovery solicitations
source-quench Source quenches
source-route-
failed
Source route failed
time-exceeded All time exceeded
timestamp-reply Timestamp replies
timestamp-
request
Timestamp requests
traceroute Traceroute
ttl-exceeded TTL exceeded
unreachable All unreachables
deny tcp
Configure a filter that drops transmission control protocol (TCP) packets meeting the filter criteria.
C9000 Series
Syntax
deny tcp {source mask | any | host ip-address} [bit] [operator port [port]]
{destination mask | any | host ip-address} [dscp] [bit] [operator port [port]]
[count [bytes]] [order] [fragments] [log [interval minutes] [threshold-in-msgs
[count]] [monitor]
226 Access Control Lists (ACL)