Table of Contents
Advertisement
Configuring IP Routing
Configuring IP routes
ICMP Redirects
If you set the Private parameter to Yes in a Connection profile, the router does not disclose its
route in response to queries from routing protocols.
Example of RIP and ICMP configuration
The following sample configuration instructs the MAX to ignore ICMP Redirect packets, to
receive (but not send) RIP updates on the Ethernet interface, and to send (but not receive) RIP
updates on a WAN connection.
1
2
3
4
5
6
7
9-62
ICMP Redirect packets enable the MAX to dynamically find the most
efficient IP route to a destination, but they are one of the oldest and
least secure route discovery methods on the Internet. ICMP Redirect
packets can be counterfeited to change the way a device routes
packets. Therefore, the ICMP Redirects parameter is set to Ignore by
default. Change the setting to Accept if you want to accept these
packets.
Open Ethernet > Mod Config > Ether Options.
Configure the MAX to receive (but not send) RIP updates on the Ethernet interface:
Ethernet
Mod Config
Ether options...
RIP=Recv-v2
Receiving RIP updates on the Ethernet interface means that the MAX learns about
networks that are reachable through other local routers. However, it does not propagate
information about all of its remote connections to the local routers.
Exit the profile and, at the exit prompt, select the exit and accept option.
Set ICMP Redirects to Ignore:
ICMP Redirects=Ignore
Exit the profile and, at the exit prompt, select the exit and accept option.
Open the Connection profile in which the link is configured, open the IP Options
subprofile, and configure the MAX to send (but not receive) RIP updates on the link:
Ethernet
Connections
Connection profile 1
IP options...
RIP=Send-v2
Sending RIP on a WAN connection enables the remote devices to access networks that are
reachable through other local routers. However, the MAX does not receive information
about networks that are reachable through the remote router.
Exit the profile and, at the exit prompt, select the exit and accept option.
MAX 6000/3000 Network Configuration Guide
Advertisement
Table of Contents
