diff options
| author |   Steve Shin <jonshin@cisco.com> | 2018-02-05 16:44:19 -0800 |
|---|---|---|
| committer |   Damjan Marion <dmarion.lists@gmail.com> | 2018-02-06 12:29:37 +0000 |
| commit | bbd41cd5da7b8db76a5faed22c061358c147f191 (patch) | |
| tree | 0857e50c9eb662c95de3f1118b52abbb4361dc6f /src/vnet/ip | |
| parent | 7d25415a9384d4c3d786d0c1ae5c0fcff3112acd (diff) | |
Reflexive ACL support on ICMP
Normally session keys are generated by mirroring the packets sent.
ICMP message type should be used and inverted for the stateful ACL.
Supported ICMP messages with this patch:
- ICMPv4: Echo/Timestamp/Information/Address Mask requests
- ICMPv6: Echo request/Node Information Queury
The invmap & valid_new tables can be modified to make any other
ICMP messages to be reflexive ACL.
Change-Id: Ia47b08b79fe0a5b1f7a995af78de3763d275dbd9
Signed-off-by: Steve Shin <jonshin@cisco.com>
Diffstat (limited to 'src/vnet/ip')
0 files changed, 0 insertions, 0 deletions