Security Guide (Supporting ADX v03.1.00) Instruction Manual

Brocade Virtual ADX Security Guide 91
53-1003250-01
DDoS protection
5
The drop parameter directs the Brocade Virtual ADX to drop traffic on the bound interface that
matches the rule specified by the configured icmp-type. The no-drop parameter disables this
function.
TABLE 12 icmp option types and descriptions
ICMP Option Type Description
icmp-type addr-mask icmp type 17: addr-mask
timestamp-reply: icmp type 14: timestamp-reply
icmp-type addr-mask-reply addr-mask-reply: icmp type 18: addr-mask-reply
icmp-type destination type icmp type 3: destination-unreachable.
The type variable is specified as one of the following values.
admin-prohibit
fragment-needed
host-admin-prohibited
host-precedence-violation
host-unknown
host-unreachable
host-unreachable-for-tos
net-admin-prohibited
net-unknown
net-unreachable
network-unreachable-for-tos
port-unreachable
precedence-cutoff
protocol-unreachable
route-fail
source-host-isolated
code 13: admin-prohibit
code 4: fragment-needed
code 10: destination-host-admin-prohibited
code 14: host-precedence-violation
code 7: destination-host-unknown
code 1: host-unreachable
code 12: host-unreachable-for-tos
code 9: destination-network-admin-prohibited
code 6: net-unknown
code 0: network-unreachable
code 11: network-unreachable-for-tos
code 3: port-unreachable
code 15: precedence-cutoff-in-effect
code 2: protocol-unreachable
code 5: route-fail
code 8: source-host-isolate
icmp-type echo-reply icmp type 0: echo-reply
icmp-type echo-request icmp type 8: echo-request
icmp-type info-reply icmp type 16: information-reply
icmp-type info-request icmp type 15: information-request
icmp-type param-problem icmp type 12: parameter-problem
icmp-type redirect icmp type 5: redirect
icmp-type
router-advertisement
icmp type 9: router-advertisement
icmp-type r outer-selection icmp type 10: router-selection
icmp-type source-quench icmp type 4: source-quench
icmp-type time icmp type 11: time-exceeded
icmp-type timestamp icmp type 13: timestamp
icmp-type timestamp-reply icmp type 14: timestamp-reply