Enterasys SecureStack C2 C2G170-24 - Ip Forward-Protocol

ip forward-protocol
SecureStack C2 Configuration Guide 19-13
broadcastonlyonthe30networkinterfa c ewillallowanyonefromanyothernetworks(10,20,40,
50)tosenddirectedbroadcasttothe30network.
Example
ThisexampleshowshowtoenableIPdirectedbroadcastsonVLAN1:
C2(su)->router(Config)#interface vlan 1
C2(su)->router(Config-if(Vlan 1))#ip directed-broadcast
ip forward-protocol
UsethiscommandtoenableUDPbroadcastforwardingandspecifywhichprotocolswillbe
forwarded .
Syntax
ip forward-protocol udp [port]
no ip forward-protocol udp [port]
Parameters
Defaults
Ifportisnotspecified,thefo llowingdefaultsareused:
•TrivialFileTransferProtocol(TFTP)(port69)
• DomainNamingSystem(port53)
•Timeservice(port37)
•NetBIOSNameServer(port137)
•NetBIOSDatagramServer(port138)
• TACACSservice(port49)
•EN‐116NameService(port42)
Mode
Routercommand,Globalconfiguration:C2(su)‐>router(Config)#
Routerinterfaceconfiguration:C2(su)‐>router(Config‐if(Vlan1)#
Usage
Inordertoactuallyforwardprotocols,youmustconfigureanIPhelperaddressontheindividual
routerinterfaceswiththe command“iphelper‐address”(page 19‐14).
Ifacertainserviceexistsinsidethenode,andthereisnoneedtoforwardtherequesttoremote
networks,the“no”formof
thiscommandshouldbeusedtodisabletheforwardingforthespecific
port.Suchrequestswillnotbeautomaticallyblockedfrombeingforwardedjustbecauseaservice
forthemexistsinthenode.
ThenoformofthiscommandremovesaUDPportorprotocol,disablingforwarding.
udp SpecifiesUDPasthe
IPforwardingprotocol.
port (Optional)SpecifiesadestinationportthatcontrolswhichUDPservices
areforwarded.