2-3
z If receiving a lot of malicious packets that cause it to send ICMP error packets, the device’s
performance will be reduced.
z As the ICMP redirection function increases the routing table size of a host, the host’s performance
will be reduced if its routing table becomes very large.
z If a host sends malicious ICMP destination unreachable packets, end users may be affected.
You can disable the device from sending such ICMP error packets for reducing network traffic and
preventing malicious attacks.
Follow these steps to disable sending ICMP error packets:
To do… Use the command… Remarks
Enter system view
system-view
—
Disable sending ICMP redirects
undo icmp redirect send
Required
Enabled by default.
Disable sending ICMP destination
unreachable packets
undo icmp unreach send
Required
Enabled by default.
Displaying and Maintaining IP Performance Configuration
To do… Use the command… Remarks
Display TCP connection status
display tcp status
Display TCP connection statistics
display tcp statistics
Display UDP traffic statistics
display udp statistics
Display IP traffic statistics
display ip statistics
Display ICMP traffic statistics
display icmp statistics
Display the current socket
information of the system
display ip socket [ socktype sock-type ]
[ task-id socket-id ]
Display the forwarding information
base (FIB) entries
display fib
Display the FIB entries matching the
destination IP address
display fib ip_address1 [ { mask1 |
mask-length1 } [ ip_address2 { mask2 |
mask-length2 } | longer ] | longer ]
Display the FIB entries filtering
through a specific ACL
display fib acl number
Display the FIB entries in the buffer
which begin with, include or exclude
the specified character string.
display fib | { begin | include | exclude }
regular-expression
Display the FIB entries filtering
through a specific prefix list
display fib ip-prefix ip-prefix-name
Display the total number of the FIB
entries
display fib statistics
Available in
any view
To Next Page
Loading...
