Figure 3-3 Networking For Configuring Icmp Security Function - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - IP Service
Networking Requirement
As shown in
individual users, and DSLAMs are attached to the S9300. The S9300 is connected to the Internet
through a BRAS. To reduce the workload on the S9300, you need to configure the S9300 to
discard certain ICMP packets. The ICMP packets to be discarded have any of the following
characteristics:
l
l
l

Figure 3-3 Networking for configuring ICMP security function

DSLAM
Configuration Roadmap
Perform the configurations in the system view of the S9300. The configuration roadmap is as
follows:
l
l
l
Data Preparation
None
Issue 02 (2009-08-06)
Figure 3-3, the S9300 functions as the convergence device. The enterprise users,
The TTL values of the packets are 1.
The packets carry options.
The destination addresses of the packets are unreachable.
User
network
Enterprise
Configure the S9300 to discard the ICMP packets whose TTL values are 1.
Configure the S9300 to discard the ICMP packets that carry options.
Configure the S9300 to discard the ICMP packets whose destination addresses are
unreachable.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Internet
BRAS
S9300
Individual
user
3 IP Performance Configuration
user
3-17