No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Feature Description - LAN Access and MAN Access 01

NE05E and NE08E V300R003C10SPC500

This is NE05E and NE08E V300R003C10SPC500 Feature Description - LAN Access and MAN Access
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Application Scenarios for IPv4

Application Scenarios for IPv4

Security of the IPv4 Protocol Stack

In normal situations, Net Unreachable messages, Time Exceeded messages, and Port Unreachable messages in ICMP can be correctly sent and received. When network traffic is heavy and a great number of errors occur, a NE sends a great number of ICMP messages, which increases network traffic. Receiving and processing these messages may cause NE performance to deteriorate. In addition, network attacks are usually initiated by using ICMP error messages, which may worsen network congestion.

On the NE, you can enable or disable the sending and receiving of ICMP messages.

In the inbound direction, you can control the following ICMP messages:
  • Echo Request message
  • Echo Reply message
  • Host Unreachable message
  • Time Exceeded message
  • Port Unreachable message
In the outbound direction, you can control the following ICMP messages:
  • Time Exceeded message
  • Port Unreachable message
  • Destination Unreachable message

If you disable the sending or receiving of ICMP messages, the NE does not send or receive any ICMP message. This reduces network traffic and NE burden and prevents malicious attacks.

Alternatively, you can limit the ICMP message rate and configure the NE to discard ICMP messages with the TTL 1 and ICMP messages that carry options. This reduces NE burden.

Translation
Download
Updated: 2019-01-14

Document ID: EDOC1100058932

Views: 6045

Downloads: 9

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next