Table of Contents
Advertisement
Chapter 4: IP Routing Configuration Guide
Configuring Direct Broadcast
You can configure the IA to forward all directed broadcast traffic from the local subnet to a
specified IP address or all associated IP addresses. This is a more efficient method than
defining only one local interface and remote IP address destination at a time with the
ip-helper command when you are forwarding traffic from more than one interface in the
local subnet to a remote destination IP address.
To forward all directed broadcast traffic to a specified IP address, enter the following
command in Configure mode:
Forward directed broadcast
traffic.
Configuring Denial of Service (DOS)
By default, the IA installs flows in the hardware so that packets sent as directed broadcasts
are dropped in hardware, if directed broadcast is not enabled on the interface where the
packet is received. You can disable this feature, causing directed broadcast packets to be
processed on the IA even if directed broadcast is not enabled on the interface receiving the
packet.
Similarly, the IA installs flows to drop packets destined for the IA for which service is not
provided by the IA. This prevents packets for unknown services from slowing the CPU.
You can disable this behavior, causing these packets to be processed by the CPU.
Disables the directed-
broadcast-protection feature
of the IA.
Disables the port-attack-
protection feature of the IA.
60
ip enable directed-broadcast interface
<interface name>
|all
ip dos disable directed-broadcast-protection
ip dos disable port-attack-protection
Internet Appliance User Reference Manual
Advertisement
Table of Contents
