Zte ZXR10 8900 Series - Session Icmp-Redirect; Session Tcp-Reset

ZXR108900SeriesCommandManual(FWVolume)
ExampleT oestablishanFTPsession,executethefollowingcommand:
#sessionprotocoladd21
Toonlyestablishsessionsfordefaultprotocols,executethefol-
lowingcommand:
#sessionprotocoldefault
sessionicmp-redirect
Command
Function
Thiscommandisusedtosetwhethertopermitdevicetosend
ICMPredirectpacket.
CommandFormatsessionicmp-redirect<on|off>
Parameter
Description
Parameter
Description
on|off
ThissetswethertosendICMPredirectpacket,
notsendbydefault.
Command
Illustration
Insomerouter-on-a-stickcases,communicationisasymmetrical
toFW.Inthiscase,bysendingICMPredirectpacket,hostscan
intercommunicatenormally.TheprerequisitesofsendingICMP
redirectpacket:
1.ConguretopermittosendICMPredirectpacket,thepacket
isnotpermittedtosendbydefault.
2.Outgoinginterfaceisthesamewithincominginterface.Next-
hopaddress(ratherthandestinationaddress)andsourcead-
dressareinthesamenetworksegmentwiththisaddress.
ExampleT opermitintrusionpreventiondevicetosendICMPredirectpacket,
executethefollowingcommand:
#sessionicmp-redirecton
sessiontcp-reset
Command
Function
ThiscommandisusedtosetwhethertopermitdevicetosendTCP
Resetpacket.
CommandFormatsessiontcp-reset<on|off>
Parameter
Description
Parameter
Description
on|off
Thiscommandisusedtosetwhetherto
permitdevicetosendTCPResetpacket.The
packetisnotsentbydefault.
ExampleT osendTCPresetpacket,executethefollowingcommand:
#sessiontcp-reseton
112ConfidentialandProprietaryInformationofZTECORPORATION