Example For Optimizing System Performance By Discarding Certain Icmp Packets - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
There is no reachable route from RouterB to RouterC; therefore RouterB should respond to ping
packets received from RouterA with ICMP host-unreachable packets. Because GE1/0/0 of
Router B is disabled from sending ICMP host-unreachable packets, RouterB does not respond
to ping packets received from RouterA.
----End
Configuration Files
l
l
l
7.7.2 Example for Optimizing System Performance by Discarding
Certain ICMP Packets
This section describes how to optimize system performance by discarding specified ICMP
packets.
Networking Requirements
As shown in
user, and user network that is connected to an LSW to the Internet. RouterA is connected to
RouterB. RouterA needs to discard ICMP packets with TTL value of 1, with options, or with
unreachable destinations to protect CPU resources.
Issue 02 (2012-03-30)
Configuration file of RouterA
#
sysname RouterA
#
interface GigabitEthernet 1/0/0
ip address 1.1.1.1 255.255.255.0
#
ip route-static 2.2.2.0 255.255.255.0 1.1.1.2
#
return
Configuration file of RouterB
#
sysname RouterB
#
interface GigabitEthernet 1/0/0
ip address 1.1.1.2 255.255.255.0
undo icmp host-unreachable send
#
return
Configuration file of RouterC
#
sysname RouterC
#
interface GigabitEthernet 1/0/0
ip address 2.2.2.2 255.255.255.0
#
return
Figure 7-2, RouterA functions as an access device for the enterprise, individual
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 ICMP Security Configuration
159