159
ip icmp fragment discarding
Use ip icmp fragment discarding to disable forwarding of ICMP fragments.
Use undo ip icmp fragment discarding to enable forwarding of ICMP fragments.
Syntax
ip icmp fragment discarding
undo ip icmp fragment discarding
Default
Forwarding of ICMP fragments is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Disable forwarding of ICMP fragments can prevent ICMP fragment attacks.
Examples
# Disable forwarding of ICMP fragments.
<Sysname> system-view
[Sysname] ip icmp fragment discarding
ip icmp source
Use ip icmp source to enable specifying the source address for outgoing ICMP packets.
Use undo ip icmp source to restore the default.
Syntax
ip icmp source [ vpn-instance vpn-instance-name ] ip-address
undo ip icmp source [ vpn-instance vpn-instance-name ]
Default
The device uses the IP address of the sending interface as the source IP address for outgoing ICMP
packets.
Views
System view
Predefined user roles
network-admin
Parameters
vpn-instance vpn-instance-name: Specifies the VPN instance to which the specified address
belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The
specified VPN instance must exist. If the specified IP address is on the public network, do not use
this option.
ip-address: Specifies an IP address.
To Next Page
Loading...
Need help?
General