3Com 4500G Family Configuration Manual page 293

If the source uses "strict source routing" to send packets, but the intermediate device finds that the
next hop specified by the source is not directly connected, the device will send the source a "source
routing failure" ICMP error packet.
When forwarding a packet, if the MTU of the sending interface is smaller than the packet but the
packet has been set "Don't Fragment", the device will send the source a "fragmentation needed
and Don't Fragment (DF)-set" ICMP error packet.
Disadvantages of sending ICMP error packets
Although sending ICMP error packets facilitates network control and management, it still has the
following disadvantages:
Sending a lot of ICMP packets will increase network traffic.
If a device receives a lot of malicious packets that cause it to send ICMP error packets, its
performance will be reduced.
As the redirection function increases the routing table size of a host, the host's performance will be
reduced if its routing table becomes very large.
If a host sends malicious ICMP destination unreachable packets, end users may be affected.
To prevent such problems, you can disable the device from sending ICMP error packets.
Follow these steps to disable sending of ICMP error packets:
To do...
Enter system view
Enable sending of ICMP
redirect packets
Disable sending of ICMP
timeout packets
Enable sending of ICMP
destination unreachable
packets
The device stops sending "TTL timeout" ICMP error packets after sending ICMP timeout packets is
disabled. However, "reassembly timeout" error packets will be sent normally.
Use the command...
system-view
ip redirects enable
undo ip ttl-expires
ip unreachables enable
1-5
Remarks
—
Required
Disabled by default.
Required
Enabled by default.
Required
Disabled by default.