< Home

Discarding IP Packets with Invalid Destination IP Addresses and Recording Logs

Context

The following three types of IP addresses are invalid destination IP addresses and should not be used on the network:
  • IP address with all 0s, that is, 0.0.0.0
  • IP addresses with a network ID of 127, that is, 127.0.0.0 to 127.255.255.255
  • Class E IP addresses except 255.255.255.255, that is, 240.0.0.0 to 255.255.255.254
If the device processes the IP packets with these invalid destination IP addresses, the device burden is increased and network bandwidth is consumed. To solve this problem, configure the device to discard these IP packets and report statistics about the discarded packets through logs.
  • Devices of the following models will discard IP packets destined to 0.0.0.0, 127.0.0.0 to 127.255.255.255, and 240.0.0.0 to 255.255.255.254 only after this function is configured:

    S5720-HI, S5730-HI, S5731-H, S5731S-H, S5732-H, S5731-S, S5731S-S, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S

  • Devices of other models discard the IP packet destined to an IP address that does not match any routing entry. Since there is no routing entry matching 0.0.0.0, 127.0.0.0 to 127.255.255.255, or 240.0.0.0 to 255.255.255.254, devices will discard IP packets destined to these IP addresses by default.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run drop illegal-dst-ip enable

    The device is enabled to discard IP packets destined to invalid IP addresses and record logs.

    By default, the device is disabled from discarding IP packets destined to invalid IP addresses and recording logs.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >