Icmp Packet Processing - Extreme Networks ExtremeWare 7.2e Installation And User Manual

IP Unicast Routing
create vlan Personnel
config Finance add port 5,6
config Personnel add port 21,22
config Finance ipaddress 192.207.35.1
config Personnel ipaddress 192.207.36.1
config rip add vlan Finance
config rip add vlan Personnel
enable ipforwarding
enable rip

ICMP Packet Processing

As ICMP packets are routed or generated, you can take various actions to control distribution. For
ICMP packets typically generated or observed as part of the routing function, you can assert control on
a per-type, per-VLAN basis. You would alter the default settings for security reasons: to restrict the
success of tools that can be used to find an important application, host, or topology information. The
controls include the disabling of transmitting ICMP messages associated with unreachables,
port-unreachables, time-exceeded, parameter-problems, redirects, time-stamp, and address-mask
requests.
To enable or disable the generation of an ICMP address-mask reply on one or all VLANs, use the
following commands:
enable icmp address-mask {vlan <vlan name>}
disable icmp address-mask {vlan <vlan name>}
To enable or disable the generation of an ICMP parameter-problem message on one or all VLANs, use
the following commands:
enable icmp parameter-problem {vlan <vlan name>}
disable icmp parameter-problem {vlan <vlan name>}
To enable or disable the generation of ICMP port unreachable messages on one or all VLANs, use the
following commands:
enable icmp port-unreachables {vlan <vlan name>}
disable icmp port-unreachables {vlan <vlan name>}
To enable or disable the generation of ICMP redirect messages on one or all VLANs, use the following
commands:
enable icmp redirects {vlan <vlan name>}
disable icmp redirects {vlan <vlan name>}
To enable or disable the generation of ICMP time exceeded messages on one or all VLANs, use the
following commands:
enable icmp time-exceeded {vlan <vlan name>}
226 ExtremeWare 7.2e Installation and User Guide