D-Link xStack DWS-3200 Series, Cli Manual

Page: 250 / 581

DXS/DWS-3200 series CLI Reference Guide
Page 247
security-suite deny martian-addresses
The security-suite deny martian-addresses Global Configuration mode command denies packets containing
reserved IP addresses. Use the no form of this command to permit those addresses.
Syntax
security-suite deny martian-addresses { reserved | add { ip-address { mask | prefix-length }} | remove { ip-
address { mask | prefix-length }}
no security-suite martian-addresses
Parameters
•
ip-address — Specify the packets to discard, with that IP address as the source IP address or the destination
IP address.
•
mask — Specifies the network mask of the IP address.
•
prefix-length — Specifies the number of bits that comprise the IP address prefix. The prefix length must be
preceded by a forward slash (/).
•
reserved — Specify to discard packets with source address or destination address in the block of the
reserved IP addresses. See the usage guidelines for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
The following table describes the reserved addresses:
A d d r e s s b l o c k Present use
0.0.0.0/8 (except 0.0.0.0/32 as
source address) Addresses in this block refer to source hosts on "this" network.
127.0.0.0/8 This block is assigned for use as the Internet host loopback address.
192.0.2.0/24 This block is assigned as "TEST-NET" for use in documentation and
example code.
224.0.0.0/4 as source This block, formerly known as the Class D address space, is allocated
for use in IPv4 multicast address assignments.
240.0.0.0/4 (except
255.255.255.255/32 as destination
address) This block, formerly known as the Class E address space, is reserved.