drop illegal-dst-ip enable
Function
The drop illegal-dst-ip enable command enables the device to discard IP packets with invalid destination IP addresses and record logs.
The undo drop illegal-dst-ip enable command disables the device from discarding IP packets with invalid destination IP addresses and recording logs.
By default, a device is disabled from discarding IP packets with invalid destination IP addresses and recording logs.
Usage Guidelines
- IP address with all 0s, that is, 0.0.0.0
- IP addresses with a network ID of 127, that is, 127.0.0.0 to 127.255.255.255
- Class E IP addresses except 255.255.255.255, that is, 240.0.0.0 to 255.255.255.254
After the drop illegal-dst-ip enable command is run on a device, the device discards the IP packets destined to invalid IP addresses and reports statistics about the discarded packets through logs. This reduces the device burden and prevents these packets from occupying network bandwidth.
- Devices of the following models will discard IP packets destined to 0.0.0.0, 127.0.0.0 to 127.255.255.255, and 240.0.0.0 to 255.255.255.254 only after this function is configured:
S5720-HI, S5730-HI, S5731-H, S5731S-H, S5732-H, S5731-S, S5731S-S, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S
- Devices of other models discard the IP packet destined to an IP address that does not match any routing entry. Since there is no routing entry matching 0.0.0.0, 127.0.0.0 to 127.255.255.255, or 240.0.0.0 to 255.255.255.254, devices will discard IP packets destined to these IP addresses by default.