Re: icmp type and code DOCCD?

Thanks Guys, Great info once again.

On Tue, Jun 23, 2009 at 7:03 PM, Dale Shaw <dale.shaw_at_gmail.com> wrote:

> Hi Dennis,
>
> On Wed, Jun 24, 2009 at 8:21 AM, Dennis Worth<dennis.worth_at_gmail.com>
> wrote:
> > Anyone have a link to icmp type and code on DOCCD?
>
> This doesn't directly answer your question, but don't discount the
> ability of IOS to resolve these sort of things for you:
>
> R1(config)#access-list 100 permit icmp any any 0
> R1(config)#access-list 100 permit icmp any any 1
> R1(config)#access-list 100 permit icmp any any 2
> R1(config)#access-list 100 permit icmp any any 3
> [...]
> R1(config)#access-list 100 permit icmp any any 39
> R1(config)#access-list 100 permit icmp any any 40
> R1(config)#access-list 100 permit icmp any any 41
>
> R1(config)#do sh run | i access-list 100
> access-list 100 permit icmp any any echo-reply
> access-list 100 permit icmp any any 1
> access-list 100 permit icmp any any 2
> access-list 100 permit icmp any any unreachable
> access-list 100 permit icmp any any source-quench
> access-list 100 permit icmp any any redirect
> access-list 100 permit icmp any any alternate-address
> access-list 100 permit icmp any any 7
> access-list 100 permit icmp any any echo
> access-list 100 permit icmp any any router-advertisement
> access-list 100 permit icmp any any router-solicitation
> access-list 100 permit icmp any any time-exceeded
> access-list 100 permit icmp any any parameter-problem
> access-list 100 permit icmp any any 113
> access-list 100 permit icmp any any timestamp-request
> access-list 100 permit icmp any any timestamp-reply
> access-list 100 permit icmp any any information-request
> access-list 100 permit icmp any any information-reply
> access-list 100 permit icmp any any mask-request
> access-list 100 permit icmp any any mask-reply
> access-list 100 permit icmp any any 19
> access-list 100 permit icmp any any 20
> access-list 100 permit icmp any any 21
> access-list 100 permit icmp any any 22
> access-list 100 permit icmp any any 23
> access-list 100 permit icmp any any 24
> access-list 100 permit icmp any any 25
> access-list 100 permit icmp any any 26
> access-list 100 permit icmp any any 27
> access-list 100 permit icmp any any 28
> access-list 100 permit icmp any any 29
> access-list 100 permit icmp any any traceroute
> access-list 100 permit icmp any any conversion-error
> access-list 100 permit icmp any any mobile-redirect
> access-list 100 permit icmp any any 33
> access-list 100 permit icmp any any 34
> access-list 100 permit icmp any any 35
> access-list 100 permit icmp any any 36
> access-list 100 permit icmp any any 37
> access-list 100 permit icmp any any 38
> access-list 100 permit icmp any any 39
> access-list 100 permit icmp any any 40
> access-list 100 permit icmp any any 41
>
> Obviously this just resolves ICMP types, but you can go into sub-codes as
> well:
>
> R1(config)#access-list 101 permit icmp any any 3 0
> R1(config)#access-list 101 permit icmp any any 3 1
> R1(config)#access-list 101 permit icmp any any 3 2
> R1(config)#access-list 101 permit icmp any any 3 3
> R1(config)#access-list 101 permit icmp any any 3 4
> R1(config)#access-list 101 permit icmp any any 3 5
> R1(config)#access-list 101 permit icmp any any 3 6
> R1(config)#access-list 101 permit icmp any any 3 7
> R1(config)#access-list 101 permit icmp any any 3 8
> R1(config)#access-list 101 permit icmp any any 3 9
> R1(config)#access-list 101 permit icmp any any 3 10
> R1(config)#access-list 101 permit icmp any any 3 11
> R1(config)#access-list 101 permit icmp any any 3 12
> R1(config)#access-list 101 permit icmp any any 3 13
> R1(config)#access-list 101 permit icmp any any 3 14
> R1(config)#access-list 101 permit icmp any any 3 15
>
> R1(config)#do sh run | i access-list 101
> access-list 101 permit icmp any any net-unreachable
> access-list 101 permit icmp any any host-unreachable
> access-list 101 permit icmp any any protocol-unreachable
> access-list 101 permit icmp any any port-unreachable
> access-list 101 permit icmp any any packet-too-big
> access-list 101 permit icmp any any source-route-failed
> access-list 101 permit icmp any any network-unknown
> access-list 101 permit icmp any any host-unknown
> access-list 101 permit icmp any any host-isolated
> access-list 101 permit icmp any any dod-net-prohibited
> access-list 101 permit icmp any any dod-host-prohibited
> access-list 101 permit icmp any any net-tos-unreachable
> access-list 101 permit icmp any any host-tos-unreachable
> access-list 101 permit icmp any any administratively-prohibited
> access-list 101 permit icmp any any host-precedence-unreachable
> access-list 101 permit icmp any any precedence-unreachable
>
> You can use similar methods to resolve (for example) IP precedence values:
>
> R1(config)#access-list 101 permit icmp any any precedence ?
> <0-7> Precedence value
> critical Match packets with critical precedence (5)
> flash Match packets with flash precedence (3)
> flash-override Match packets with flash override precedence (4)
> immediate Match packets with immediate precedence (2)
> internet Match packets with internetwork control precedence (6)
> network Match packets with network control precedence (7)
> priority Match packets with priority precedence (1)
> routine Match packets with routine precedence (0)
>
> Anyway, the point is, sometimes it's quicker and easier to get what
> you need from IOS rather than digging around inside the DocCD.
>
> cheers,
> Dale
>

-- 
Dennis Worth
Blogs and organic groups at http://www.ccie.net