The Policy Of Unreached Messages; Ip Tcp Flag Control; Rst Configuration - Siemens S223 User Manual

User Manual
SURPASS hiD 6615 S223/S323 R1.5
7.14.4
7.15
7.15.1
A50010-Y3-C150-2-7619
The following is an example for configuring ICMP Redirect Message and checking the
configuration.
SWITCH(config)# show running-config
(omitted)
interface 1
ip address 222.121.68.247/24
!
!
!
SWITCH(config)# ip redirects
SWITCH(config)# show running-config
(omitted)
interface 1
ip address 222.121.68.247/24
!!
ip redirects
!
!
SWITCH(config)#

The policy of unreached messages

When the packets can't reach Destination host or the network, the switch is supposed to
bring them back to the source IP address. What if too many unreached packets are com-
ing into the system, it might cause slow down the system operation.
Not to bring these messages back to source IP address on a specific interface, use the
following command on Interface Configuration mode.
Command
ip unreachables
no ip unreachables

IP TCP Flag Control

TCP (Transmission Control Protocol) header includes six kinds of flags that are URG,
ACK, PSH, RST, SYN, and FIN. For the hiD 6615 S223/S323, you can configure RST
and SYN as the below.

RST Configuration

RST sends a message when TCP connection can not be done to a person who tries to
make it. However, it is also possible to configure to block the message. This function will
Mode
Configures not to bring unreached messages back to
their source IP address on interface.
Interface
Brings all unreached messages back to their source IP
address on interface.
UMN:CLI
Description
173