Cannot create ICMP service with Type and Code on Cisco router

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk101500
Technical Level
Product	Quantum Security Management
Version	R77 (EOL), R77.10 (EOL)
Date Created	03-Jul-2014
Last Modified	27-May-2015

Symptoms

When defining an ICMP service with Type and Code and install it on Cisco router, the ICMP code value is ignored.

For example, when trying to create a rule ICMP Type 3 Code 4 and install it on Cisco router, it only creates a rule ICMP Type 3.
The show run command on Cisco target shows:
permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 unreachable

While the desired output is:

permit icmp host 6.5.19.90 8.0.0.0 0.255.255.255 packet-too-big

Solution

Note: To view this solution you need to Sign In .