icmp (Security IDP Signature Attack)
Syntax
icmp {
code {
match (equal | greater-than | less-than | not-equal);
value code-value;
}
data-length {
match (equal | greater-than | less-than | not-equal);
value data-length;
}
identification (Security ICMP Headers) {
match (equal | greater-than | less-than | not-equal);
value identification-value;
}
sequence-number (Security IDP ICMP Headers) {
match (equal | greater-than | less-than | not-equal);
value sequence-number;
}
type (Security IDP ICMP Headers) {
match (equal | greater-than | less-than | not-equal);
value type-value;
}
}
Hierarchy Level
[edit security idp custom-attack attack-name attack-type signature protocol]
Description
Allow IDP to match the ICMP header information for the signature attack.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.3.