Cisco 300 Series Cli Manual page 844

50
844
There is no no form of the security-suite deny martian-addresses
remove}
command. Use instead the security-suite deny martian-addresses
remove
reserved command to remove protection (and free up hardware
resources).
Parameters
•
reserved add/remove—Add or remove the table of reserved addresses
below.
•
ip-address—Adds/discards packets with the specified IP source or
destination address.
•
mask—Specifies the network mask of the IP address.
•
prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
•
reserved—Discards packets with the source or destination IP address in
the block of the reserved (Martian) IP addresses. See the User Guidelines
for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
For this command to work,
security-suite deny martian-addresses
in the following table:
Address block
0.0.0.0/8 (except when
0.0.0.0/32 is the source
address)
127.0.0.0/8
192.0.2.0/24
security-suite enable
reserved
Present Use
Addresses in this block refer to source hosts on "this"
network.
This block is assigned for use as the Internet host
loopback address.
This block is assigned as "TEST-NET" for use in
documentation and example code.
78-21075-01 Command Line Interface Reference Guide
Denial of Service (DoS) Commands
reserved {add |
must be enabled globally.
adds or removes the addresses