H3C SOHO IE4300, Command Reference Manual

Page: 935 / 3296

43
Examples
# Set the bucket size to 40 tokens and the interval for tokens to arrive in the bucket to 200
milliseconds for ICMPv6 error messages.
<Sysname> system-view
[Sysname] ipv6 icmpv6 error-interval 200 40
ipv6 icmpv6 multicast-echo-reply enable
Use
ipv6 icmpv6 multicast-echo-reply enable
to enable replying to multicast echo
requests.
Use
undo ipv6 icmpv6 multicast-echo-reply
to restore the default.
Syntax
ipv6 icmpv6 multicast-echo-reply enable
undo ipv6 icmpv6 multicast-echo-reply enable
Default
The device is disabled from replying to multicast echo requests.
Views
System view
Predefined user roles
network-admin
Usage guidelines
If a host is configured to reply to multicast echo requests, an attacker can use this mechanism to
attack the host. For example, the attacker can send an echo request to a multicast address with
Host A as the source. All hosts in the multicast group will send echo replies to Host A.
To prevent attacks, do not enable the device to reply to multicast echo requests unless necessary.
Examples
# Enable replying to multicast echo requests.
<Sysname> system-view
[Sysname] ipv6 icmpv6 multicast-echo-reply enable
ipv6 icmpv6 source
Use
ipv6 icmpv6 source
to specify a source IPv6 address for unsolicited ICMPv6 packets.
Use
undo ipv6 icmpv6 source
to restore the default.
Syntax
ipv6 icmpv6 source [ vpn-instance vpn-instance-name ] ipv6-address
undo ipv6 icmpv6 source [ vpn-instance vpn-instance-name ]
Default
No IPv6 source address is specified for unsolicited ICMPv6 packets.
Views
System view