Huawei AR1200-S - Configuration Examples

mask requests 0 mask replies 0
time exceeded 0
Mping request 0 Mping reply 0
Output:echo 0 destination unreachable 0
source quench 0 redirects 0
echo reply 0 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 0
Mping request 0 Mping reply 0
7.7 Configuration Examples
This section provides ICMP security configuration examples.
7.7.1 Example for Disabling the AR1200-S from Sending Host-
Unreachable Packets
This section provides an example to illustrate how to disable the AR1200-S from sending host-
unreachable packets.
Networking Requirements
As shown in Figure 7-1, RouterA, RouterB and RouterC are connected through their layer 3
interfaces to test whether the AR1200-S can send ICMP host-unreachable packets.
Figure 7-1 Disabling the AR1200-S from sending host-unreachable packets
Eth1/0/0
RouterA
RouterB
RouterC
1.1.1.1/24
2.2.2.2/24
1.1.1.2/24
3.3.3.1/24
Internet
Eth1/0/0
Eth2/0/0Eth1/0/0
Configuration Roadmap
The configuration roadmap is as follows:
1. Assign IP addresses to corresponding interfaces on each device.
2. Configure static routes from Router A to RouterC.
3. Enable RouterA and RouterC to send ICMP host-unreachable packets.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 7 ICMP Security Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
157