Disabling forwarding ICMP fragments
To prevent ICMP fragment attacks, you can disable the switch from forwarding ICMP fragments.
To disable the switch from forwarding ICMP fragments:
Step
1.
Enter system view.
2.
Disable forwarding ICMP
fragments.
Displaying and maintaining TCP and ICMP attack
protection
Task
Display current TCP connection state.
Command
system-view
ip icmp fragment discarding
Command
display tcp status [ | { begin | exclude |
include } regular-expression ]
248
Remarks
N/A
By default, the switch is enabled to
forward ICMP fragments.
Remarks
Available in any view.