< Home

drop illegal-ip disable

Function

The drop illegal-ip disable command disables a device from discarding IPv4 and IPv6 packets sourced from the all-zero address.

The undo drop illegal-ip disable command enables a device to discard IPv4 and IPv6 packets sourced from the all-zero address.

By default, the function of discarding IPv4 and IPv6 packets sourced from the all-zero address is enabled.

The drop illegal-ip disable and undo drop illegal-ip disable commands are supported only by the S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S. The other device models discard IPv4 and IPv6 packets sourced from the all-zero address by default, and this function cannot be disabled on those models.

Format

drop illegal-ip disable

undo drop illegal-ip disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

IPv4 and IPv6 packets sourced from the all-zero address are typical attack packets. You can run the undo drop illegal-ip disable command to enable a device to discard these packets.

Example

# Enable a device to discard IPv4 and IPv6 packets sourced from the all-zero address.

<HUAWEI> system-view
[HUAWEI] undo drop illegal-ip disable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >