Detections
Analytics

2.4 Disable the IP Unreachable Function

Information

The JINOS system product no longer uses U to respond to the icmp request.

 Use icmp unreachable and change the source address to the address of the attacking device to prevent smurf attack

Solution

ZXR10#config terminal
 ZXR10 (config)#icmp-config
 ZXR10 (config-icmp)# interface fei-0/2/1/7
 ZXR10 (config-icmp-if)#no ip unreachable
 ZXR10 (config-icmp-if)#no ipv6 unreachable
 ZXR10 (config-icmp-if)#end

See Also

https://support.zte.com.cn/support/doccenter/DocumentProductHandBookDetail.aspx?sid=102&id=30768582&type=docfeedback

Item Details

Audit Name: Tenable ZTE JINOS

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: ZTE_JINOS

Control ID: 676bcbf93ad80c7a809716c66a35f11645168b1d571dce7b79be0b97dc8b2861