Configuring The Ar1200-S To Discard The Icmp Packets With Options - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
icmp ttl-exceeded drop
The AR1200-S is enabled to discard ICMP packets with the TTL value of 1.
By default, the AR1200-S does not discard ICMP packets with the TTL value of 1.
----End
7.4.3 Configuring the AR1200-S to Discard the ICMP Packets with
Options
This section describes how to configure the AR1200-S to discard the ICMP packets with options.
Context
The AR1200-S is busy in processing tasks defined in options in the IP header of ICMP packets.
For example, the AR1200-S calculates the hop count. As a result, normal services are not
processed immediately.
The AR1200-S receives a large number of ICMP packets from the network, and these packets
consume a lot of CPU resources. The AR1200-S can be configured to discard the ICMP packets
with options. This helps reduce the burden on the AR1200-S and protect CPU resources.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
icmp with-options drop
The AR1200-S is enabled to discard ICMP packets with options.
By default, the AR1200-S does not discard ICMP packets with options.
----End
7.4.4 Configuring the AR1200-S to Discard ICMP Destination-
Unreachable Packets
This section describes how to configure the AR1200-S to discard ICMP destination-unreachable
packets.
Context
The AR1200-S receives a large number of ICMP packets from the network, and these packets
consume a lot of CPU resources. The AR1200-S can be configured to discard the ICMP
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 ICMP Security Configuration
154