Enabling Sending Icmpv6 Time Exceeded Messages; Enabling Sending Icmpv6 Redirect Messages - HP 6125XLG Layer 3-Ip Services Configuration Manual

Blade switch
Table of Contents

Advertisement

If a UDP packet received is destined for the device but its UDP destination port number does not
match any process, the device sends the source a Port Unreachable ICMPv6 error message.
If a device is generating ICMPv6 destination unreachable messages incorrectly, disable the sending of
ICMPv6 destination unreachable messages to prevent attack risks.
To enable sending ICMPv6 destination unreachable messages:
Step
1.
Enter system view.
2.
Enable sending ICMPv6 destination
unreachable messages.

Enabling sending ICMPv6 time exceeded messages

The device sends ICMPv6 Time Exceeded messages as follows:
If a received packet is not destined for the device and its hop limit is 1, the device sends an ICMPv6
Hop Limit Exceeded message to the source.
Upon receiving the first fragment of an IPv6 datagram destined for the device, the device starts a
timer. If the timer expires before all the fragments arrive, the device sends an ICMPv6 Fragment
Reassembly Timeout message to the source.
If the device receives large numbers of malicious packets, its performance degrades greatly because it
must send back ICMP Time Exceeded messages. To prevent such attacks, disable sending ICMPv6 Time
Exceeded messages.
To enable sending ICMPv6 time exceeded messages:
Step
1.
Enter system view.
2.
Enable sending ICMPv6 time
exceeded messages.

Enabling sending ICMPv6 redirect messages

Upon receiving a packet from a host, the device sends an ICMPv6 redirect message to inform a better
next hop to the host when the following conditions are met:
The interface receiving the packet is the interface forwarding the packet.
The selected route is not created or modified by any ICMPv6 redirect message.
The selected route is not a default route.
The forwarded packet does not contain the routing extension header.
The ICMPv6 redirect function simplifies host management by enabling hosts that hold few routes to
optimize their routing table gradually. However, to avoid adding too many routes on hosts, this function
is disabled by default.
To enable sending ICMPv6 redirect messages:
Command
system-view
ipv6 unreachables enable
Command
system-view
ipv6 hoplimit-expires enable
153
Remarks
N/A
By default, this function is
disabled.
Remarks
N/A
The default setting is disabled.

Advertisement

Table of Contents
loading

Table of Contents