Detections
Analytics

2.4 Disable the IP Unreachable Function

Information

The ZTE Router Platform system product no longer uses U to respond to the icmp request.

 Use icmp unreachable and change the source address to the address of the attacking device to prevent smurf attack

Solution

ZXR10#config terminal
 ZXR10 (config)#icmp-config
 ZXR10 (config-icmp)# interface fei-0/2/1/7
 ZXR10 (config-icmp-if)#no ip unreachable
 ZXR10 (config-icmp-if)#no ipv6 unreachable

See Also

https://support.zte.com.cn/support/doccenter/DocumentProductHandBookDetail.aspx?sid=102&id=30768582&type=docfeedback

Item Details

Plugin: ZTE_ROSNG

Control ID: c906d494c5c9aa91921880ac8d399acf47fa099bc45fd7839dfd6071d3af4f7d