234
Usage guidelines
If a host is configured to reply to multicast echo requests, an attacker can use this mechanism to
attack the host. For example, the attacker can send an echo request to a multicast address with Host
A as the source. All hosts in the multicast group will send echo replies to Host A.
To prevent attacks, do not enable the device to reply to multicast echo requests unless necessary.
Examples
# Enable replying to multicast echo requests.
<Sysname> system-view
[Sysname] ipv6 icmpv6 multicast-echo-reply enable
ipv6 icmpv6 source
Use ipv6 icmpv6 source to specify an IPv6 address as the source address for outgoing ICMPv6
packets.
Use undo ipv6 icmpv6 source to remove the specified IPv6 source address for outgoing ICMPv6
packets.
Syntax
ipv6 icmpv6 source [ vpn-instance vpn-instance-name ] ipv6-address
undo ipv6 icmpv6 source [ vpn-instance vpn-instance-name ]
Default
No IPv6 source address for outgoing ICMPv6 packets is specified. The device uses the IPv6 address
of the sending interface as the source IPv6 address for outgoing ICMPv6 packets.
Views
System view
Predefined user roles
network-admin
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the specified
address belongs. The vpn-instance-name argument represents the VPN instance name, a
case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, the ipv6-address
argument specifies an IPv6 address on the public network. The specified VPN instance must already
exist.
ipv6-address: Specifies an IPv6 address.
Usage guidelines
It is a good practice to specify the IPv6 address of the loopback interface as the source IPv6 address
for outgoing ping echo request and ICMPv6 error messages. This feature helps users to easily locate
the sending device.
Examples
# Specify IPv6 address 1::1 as the source address for outgoing ICMPv6 packets.
<Sysname> system-view
[Sysname] ipv6 icmpv6 source 1::1
ipv6 mtu
Use ipv6 mtu to configure the MTU of IPv6 packets sent over an interface.
To Next Page
Loading...
