Optimizing Ip Performance; Enabling Receiving And Forwarding Of Directed Broadcasts To A Directly Connected Network; Enabling Receiving Of Directed Broadcasts To A Directly Connected Network; Enabling Forwarding Of Directed Broadcasts To A Directly Connected Network - HP 830 Series Configuration Manual

Poe+ unified wired-wlan switch switching engine
Hide thumbs Also See for 830 Series:
Table of Contents

Advertisement

Optimizing IP performance

This chapter describes multiple features for IP performance optimization.
Enabling receiving and forwarding of directed
broadcasts to a directly connected network
A directed broadcast packet is destined for all hosts on a specific network. In the destination IP address
of the directed broadcast, the network ID identifies the target network, and the host ID is made up of all
1s.
If a device is allowed to forward directed broadcasts to a directly-connected network, hackers can
exploit this vulnerability to attack the target network. However, you must enable this feature for the
following functions:
UDP helper—Converts broadcasts to unicasts and forwards them to a specific server.
Wake on LAN—Forwards directed broadcasts to wake up a specific host.
Enabling receiving of directed broadcasts to a directly
connected network
If a device is enabled to receive directed broadcasts, the device determines whether to forward them
according to the configuration on the outgoing interface.
To enable the device to receive directed broadcasts:
Step
1.
Enter system view.
2.
Enable the device to receive
directed broadcasts.
Enabling forwarding of directed broadcasts to a directly
connected network
Follow these guidelines when you enable the device to forward directed broadcasts:
If an ACL is referenced in the ip forward-broadcast command, only packets permitted by the ACL
can be forwarded.
If you repeatedly execute the ip forward-broadcast command on an interface, only the most
recently executed command takes effect. If the command executed most recently does not include
acl acl-number, the ACL configured previously is removed.
To enable the device to forward directed broadcasts:
Command
system-view
ip forward-broadcast
84
Remarks
N/A
By default, the device is disabled from
receiving directed broadcasts.

Advertisement

Table of Contents
loading

Table of Contents