Intel 480T, User Manual

Page: 185 / 367

C H A P T E R 1 0 IP Unicast Routing
183
settings for security reasons—to restrict the success of tools that can
be used to find an important application, host, or topology
information. The controls include the disabling of transmitting
ICMP messages associated with unreachables, port-unreachables,
time-exceeded, parameter-problems, redirects, time-stamp, and
address-mask requests.
For ICMP packets that are typically routed, you can apply access
lists to restrict forwarding behavior. Access lists are described in
Chapter 14, Access Policies.
UDP-Forwarding Commands
Table 44 describes the commands used to configure UDP-
forwarding.
Table 44: UDP-Forwarding Commands
Command Description
config udp-profile <profile_name> add
<udp_port> [vlan <name> | ipaddress
<dest_ipaddress>] Adds a forwarding entry to the specified
UDP-forwarding profile name. All
broadcast packets sent to
<udp_port>
are forwarded to either the destination IP
address (unicast or subnet directed
broadcast) or to the specified VLAN as
an all-ones broadcast.
config udp-profile <profile_name> delete
<udp_port> [vlan <name> | ipaddress
<dest_ipaddress>] Deletes a forwarding entry from the
specified
udp-profile
name.
config vlan <name> udp-profile <profile_name> Assigns a UDP-forwarding profile to the
source VLAN. Once the UDP profile is
associated with the VLAN, the switch
picks up any broadcast UDP packets that
matches with the user configured UDP
port number, and forwards those packets
to the user-defined destination. If the
UDP port is the DHCP/BOOTP port
number, appropriate DHCP/BOOTP
proxy functions are invoked.