Huawei S9300 Configuration Manual page 142

S9300&S9300E Terabit Routing Switch
Configuration Guide - IP Service
l
l
l
Data Preparation
None
Procedure
Step 1 Configure the Switch to discard certain ICMP packets.
# Configure the Switch to discard the ICMP packets whose TTL values are 1.
<Quidway> system-view
[Quidway] icmp ttl-exceeded drop all
# Configure the Switch to discard the ICMP packets that carry options.
[Quidway] icmp with-options drop all
# Configure the Switch to discard the ICMP packets whose destination addresses are
unreachable.
[Quidway] icmp unreachable drop
Step 2 Verify the configuration.
# Run the display this command in the system view to display the configuration of the ICMP
security function.
[Quidway] display this
#
icmp unreachable drop
icmp ttl-exceeded drop slot 1
icmp with-options drop slot 1
icmp ttl-exceeded drop slot 2
icmp with-options drop slot 2
icmp ttl-exceeded drop slot 3
icmp with-options drop slot 3
----End
Configuration Files
#
sysname Quidway
#
icmp unreachable drop
icmp ttl-exceeded drop slot 1
icmp with-options drop slot 1
icmp ttl-exceeded drop slot 2
icmp with-options drop slot 2
icmp ttl-exceeded drop slot 3
icmp with-options drop slot 3
#
return
Issue 01 (2012-03-15)
Configure the Switch to discard the ICMP packets whose TTL values are 1.
Configure the Switch to discard the ICMP packets that carry options.
Configure the Switch to discard the ICMP packets whose destination addresses are
unreachable.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 IP Performance Configuration
131