System-Guard L3Err Enable - H3C s3600 series Command Manual

[Sysname] system-guard ip enable

system-guard l3err enable

Syntax
system-guard l3err enable
undo system-guard l3err enable
View
System view
Parameters
None
Description
Use the system-guard l3err enable command to enable Layer 3 error control.
Use the undo system-guard l3err enable command to disable Layer 3 error control.
By default, this feature is enabled.
The Layer 3 error control feature determines how the switch disposes of Layer packets which the switch
considers to be error packets:
With the Layer 3 error control feature disabled, the switch delivers all Layer 3 packets which the switch
considers to be error packets (including IP packets with the options field) to the CPU for further
processing;
With the Layer 3 error control feature enabled, the switch directly discards all Layer 3 packets which the
switch considers to be error packets without delivering them to the CPU.
In normal situations, we recommend that you enable this feature. Because the switch cannot forward
error packets and IP packets with the Options field set, delivering all these packets to the CPU will affect
the normal work of the CPU.
Examples
# Enable Layer 3 error control.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] system-guard l3err enable
4-6