No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R008C00 CLI-based Configuration Guide

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Examples

Configuration Examples

This section provides IP performance configurations including the networking requirements, networking diagram, configuration roadmap, and configuration procedures.

Example for Optimizing System Performance by Discarding Certain ICMP Packets

Networking Requirements

The AP in Figure 7-103 functions as the aggregation device. Enterprise users and individual users are attached to the AP and the AP is connected to the Internet through a router. When a large amount of information is exchanged on the network or the network is attacked, lots of ICMP packets are forwarded and the network performance is degraded. In this case, some ICMP packets are required to be discarded to reduce the burden on the AP.

Figure 7-103  Networking diagram for configuring ICMP security function

Configuration Roadmap

The configuration roadmap is as follows:

Configure the function of discarding ICMP packets whose TTL value is 1, ICMP packets that carry options, and ICMP destination unreachable packets to reduce the burden of the device in processing a large number of ICMP packets.

Procedure

  1. Configure the device to discard certain ICMP packets.

    # Configure the device to discard ICMP packets whose TTL value is 1.

    <Huawei> system-view
    [Huawei] icmp ttl-exceeded drop

    # Configure the device to discard ICMP packets that carry options.

    [Huawei] icmp with-options drop

    # Configure the device to discard ICMP packets whose destination addresses are unreachable.

    [Huawei] icmp unreachable drop

  2. Verify the configuration.

    # Run the display this command in the system view to view the ICMP security configurations.

    [Huawei] display this
    #
     icmp unreachable drop
     icmp ttl-exceeded drop
     icmp with-options drop
    #
    

Configuration Files

Configuration file of the AP

#
 icmp unreachable drop
 icmp ttl-exceeded drop
 icmp with-options drop
# 
return
Translation
Download
Updated: 2019-01-11

Document ID: EDOC1000176006

Views: 118496

Downloads: 309

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next