UMN:CLI User Manual
V5808
212
7.8 Martian Filtering
It is possible to block packets, which trying to bring different source IP out from same
network. If packet brings different IP address, not its source IP address, then it is
impossible to know it makes a trouble. Therefore, you would better prevent this kind of
packet outgoing from your network. This function is named as Martian filter.
To enable/disable a Martian filtering, use the following command.
ip martian-filter INTERFACE
Blocks packets which bring different source IP address
from specified interface.
INTERFACE: enter the interface name.
no ip martian-filter INTERFACE
Disables a configured Martian filter.
INTERFACE: enter an interface name.
QoS and Martian filter cannot be used together.