system session limit group name rule icmp
Configures a rule set with ICMP for a session limit group.
- group-name
- A name for the session limit group.
- rule-number
-
A number for the rule.
- group-value
-
A value for the ICMP group.
- name
The ICMP name can be:
- TOS-host-redirect
- TOS-host-unreachable
- TOS-network-redirect
- TOS-network-unreachable
- address-mask-reply
- address-mask-request
- communication-prohibited
- destination-unreachable
- echo-reply
- echo-request
- fragmentation-needed
- host-precedence-violation
- host-prohibited
- host-redirect
- host-unknown
- host-unreachable
- ip-header-bad
- network-prohibited
- network-redirect
- network-unknown
- network-unreachable
- parameter-problem
- port-unreachable
- precedence-cutoff
- protocol-unreachable
- redirect
- required-option-missing
- router-advertisement
- router-solicitation
- source-quench
- source-route-failed
- time-exceeded
- timestamp-reply
- timestamp-request
- ttl-zero-during-reassembly
- ttl-zero-during-transit
- type-number
-
A number for the ICMP type.
- value
-
A value for the code.
Configuration mode.
system {
session {
limit {
group {
name <group-name> {
rule <rule-number> {
icmp {
group <group-value>
name <name>
type <type-number> code <value>
}
}
}
}
}
}
}
Use the set form of this command to configure a rule set with ICMP for a session limit group.
Use the delete form of this command to remove a rule set with ICMP from a session limit group configuration.