Cisco ASR 1000 Series Configuration Guide

The showand clear commands operate on a per process basis to be consistent with the current functionality.
Thus, any action taken by the commands will be applicable only to a particular process at a time as selected
by the process ID entered on the CLI.
Many applications have a need for show and clearcommands, which primarily aid in debugging. The following
scenarios provide examples of when these commands might be useful:
•
The application H.323 is using sockets for voice calls. According to the current number of calls, there
is still space for more sockets. However, no more sockets can be opened. You can now use the the show
sockets command to find out if the socket space is indeed exhausted or if there are unused sockets
available.
•
An application is waiting for a particular socket event to happen. A UDP segment was seen, but the
application never became active. You can use the show udp command to display the list of events being
monitored to determine if a UDP socket event is being monitored or if the socket library failed to activate
the application.
•
An application wants to forcibly close all the sockets for a particular process. You can use the clear
sockets command to close both the sockets and the underlying TCP or UDP connection or Stream
Control Transmission Protocol (SCTP) association.
How to Configure IP Services
Protecting Your Network from DOS Attacks
ICMP supports IP traffic by relaying information about paths, routes, and network conditions. ICMP messages
can be used by an attacker to gain network mapping information. IP source routing allows the source IP host
to specify a route through the IP network and is rarely used for legitimate purposes in networks. Some older
IP implementations do not process source-routed packets properly, and it may be possible to crash devices
running these implementations by sending them datagrams with source routing options.
Whenever possible, ICMP messages and IP source routing should be disabled.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
no ip source-route
4.
interface type/number/slot
5.
no ip unreachables
6.
no ip redirects
7.
no ip mask-reply
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000)
6
Configuring IP Services
How to Configure IP Services

Cisco ASR 1000 Series Specifications

General

Brand	Cisco
Model	ASR 1000 Series
Category	Network Router
Language	English