NOTE
By default, an interface is enabled to send ICMP host-unreachable packets. If this function is enabled, skip
this step.
4. Disable GE1/0/0 on Router B from sending ICMP host-unreachable packets so that
Router B will not respond to the incoming host-unreachable packets on GE1/0/0
Data Preparation
To complete the configuration, you need the following data:
l Static routes from Router A to Router C
l IP address of each interface
Procedure
Step 1 Configure RouterA.
# Configure static routes on RouterA.
<Huawei> system-view
[Huawei] sysname RouterA
[RouterA] ip route-static 2.2.2.0 255.255.255.0 1.1.1.2
# Assign an IP address to GE1/0/0.
[RouterA] interface gigabitethernet 1/0/0
[RouterA-GigabitEthernet1/0/0] ip address 1.1.1.1 24
[RouterA-GigabitEthernet1/0/0] quit
Step 2 # Configure RouterC.
# Assign an IP address to GE1/0/0.
<Huawei> system-view
[Huawei] sysname RouterC
[RouterC] interface gigabitethernet 1/0/0
[RouterC-GigabitEthernet1/0/0] ip address 2.2.2.2 24
[RouterC-GigabitEthernet1/0/0] quit
Step 3 Configure RouterB.
# Disable GE1/0/0 from sending ICMP host-unreachable packets and assign an IP address to
GE1/0/0.
<Huawei> system-view
[Huawei] sysname RouterB
[RouterB] interface gigabitethernet 1/0/0
[RouterB-GigabitEthernet1/0/0] undo icmp host-unreachable send
[RouterB-GigabitEthernet1/0/0] ip address 1.1.1.2 24
[RouterB-GigabitEthernet1/0/0] quit
[RouterB] quit
Step 4 Verify the configuration.
# Enable ICMP packet debugging on RouterB.
<RouterB> debugging ip icmp
<RouterB> terminal monitor
<RouterB> terminal debugging
# Run ping 2.2.2.2 on RouterA. If you can view that RouterB does not send ICMP host
unreachable packets, it means that the configuration succeeds.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 7 ICMP Security Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
158
To Next Page
Loading...
