Huawei AR1200-S User Manual

There is no reachable route from RouterB to RouterC; therefore RouterB should respond to ping
packets received from RouterA with ICMP host-unreachable packets. Because GE1/0/0 of
Router B is disabled from sending ICMP host-unreachable packets, RouterB does not respond
to ping packets received from RouterA.
----End
Configuration Files
l Configuration file of RouterA
#
sysname RouterA
#
interface GigabitEthernet 1/0/0
ip address 1.1.1.1 255.255.255.0
#
ip route-static 2.2.2.0 255.255.255.0 1.1.1.2
#
return
l Configuration file of RouterB
#
sysname RouterB
#
interface GigabitEthernet 1/0/0
ip address 1.1.1.2 255.255.255.0
undo icmp host-unreachable send
#
return
l Configuration file of RouterC
#
sysname RouterC
#
interface GigabitEthernet 1/0/0
ip address 2.2.2.2 255.255.255.0
#
return
7.7.2 Example for Optimizing System Performance by Discarding
Certain ICMP Packets
This section describes how to optimize system performance by discarding specified ICMP
packets.
Networking Requirements
As shown in Figure 7-2, RouterA functions as an access device for the enterprise, individual
user, and user network that is connected to an LSW to the Internet. RouterA is connected to
RouterB. RouterA needs to discard ICMP packets with TTL value of 1, with options, or with
unreachable destinations to protect CPU resources.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 7 ICMP Security Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
159

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English