icmp receive (interface view)

Function

The icmp receive command enables the interface to receive ICMP packets of a specified type.

The undo icmp receive command disables the interface from receiving ICMP packets of a specified type.

By default, the system is enabled to receive ICMP packets.

Format

icmp name { echo | echo-reply | net-unreachable | parameter-problem | timestamp-reply | timestamp-request | ttl-exceeded | information-reply | information-request | net-redirect | source-quench } receive

icmp name { reassembly-timeout | host-unreachable | host-redirect } receive

icmp name { net-tos-redirect | protocol-unreachable } receive

icmp name { port-unreachable | host-tos-redirect } receive

icmp name fragmentneed-dfset receive

icmp name source-route-failed receive

icmp name redirect receive

icmp type typevalue code codevalue receive

icmp name { reassembly-timeout | host-unreachable | host-redirect } receive inherent-global

icmp name { net-tos-redirect | protocol-unreachable } receive inherent-global

icmp name { port-unreachable | host-tos-redirect } receive inherent-global

icmp name fragmentneed-dfset receive inherent-global

icmp name source-route-failed receive inherent-global

icmp name redirect receive inherent-global

icmp type typevalue code codevalue receive inherent-global

icmp all receive inherent-global

undo icmp name { echo | echo-reply | net-unreachable | parameter-problem | timestamp-reply | timestamp-request | ttl-exceeded | information-reply | information-request | net-redirect | source-quench } receive

undo icmp name { reassembly-timeout | host-unreachable | host-redirect } receive

undo icmp name { net-tos-redirect | protocol-unreachable } receive

undo icmp name { port-unreachable | host-tos-redirect } receive

undo icmp name fragmentneed-dfset receive

undo icmp name source-route-failed receive

undo icmp type typevalue code codevalue receive

undo icmp name redirect receive

Parameters

Parameter	Description	Value
echo	Enables the device to receive ICMP Echo packets. An ICMP Echo packet is sent to the destination host during a ping operation. The destination host responds with an ICMP Echo Reply packet, indicating that the destination is reachable.	-
echo-reply	Enables the device to receive ICMP Echo Reply packets.	-
net-unreachable	Enables the device to receive net-unreachable packets.	-
parameter-problem	Enables the device to receive parameter-problem packets.	-
timestamp-reply	Enables the device to receive Timestamp Reply packets.	-
timestamp-request	Enables the device to receive Timestamp Request packets.	-
ttl-exceeded	Enables the device to receive ICMP TTL Exceeded packets.	-
information-reply	Enables the device to receive Information Request packets.	-
information-request	Enables the device to receive net-redirect packets.	-
net-redirect	Enables the device to receive net-unreachable packets.	-
source-quench	Enables the device to receive source-quench packets.	-
name	Enables the device to receive ICMP packets with a specified name.	-
reassembly-timeout	Enables the device to receive reassembly-timeout packets.	-
host-unreachable	Enables the device to receive ICMP host-unreachable packets.	-
host-redirect	Enables the device to receive host-redirect packets.	-
net-tos-redirect	Enables the device to receive net-tos-redirect packets.	-
protocol-unreachable	Enables the device to receive protocol-unreachable packets.	-
port-unreachable	Enables the device to receive ICMP port-unreachable packets.	-
host-tos-redirect	Enables the device to receive host-tos-redirect packets.	-
fragmentneed-dfset	Enables the device to receive fragmentneed-DFset packets.	-
source-route-failed	Enables the device to receive source-route-failed packets.	-
redirect	Indicates the receiving of redirect messages.	-
type typevalue	Enables the system to receive ICMP packets with a specified type.	The value is an integer ranging from 0 to 255.
code codevalue	Enables the system to receive ICMP packets with a specified code.	The value is an integer ranging from 0 to 255.
inherent-global	restores the ICMP receiving configuration in the interface view to the system.	-
all	All ICMP types.	-

Views

100ge sub-interface view, 100GE interface view, 10GE sub-interface view, 10GE interface view, 200GE sub-interface view, 25GE sub-interface view, 25GE interface view, 400GE sub-interface view, 400GE interface view, 40GE sub-interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, FlexE interface view, GE optical interface view, GE sub-interface view, GE interface view, GE electrical interface view, GMPLS-UNI interface view, Global VE sub-interface view, LMP interface view, Loopback interface view, MTI interface view, Mtunnel view, PW-VE sub-interface view, PW-VE interface view, Tunnel interface view, VBDIF interface view, VE sub-interface view, VLANIF interface view, Management interface view, Virtual template view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ip-stack	write

Usage Guidelines

Usage Scenario

In normal situations, the system can properly receive ICMP packets. In case of heavy network traffic, if hosts or ports are frequently unreachable, routers receive a large number of ICMP packets, which causes heavy traffic burden and performance deterioration. In addition, network attackers often use ICMP error packets to spy on the internal structure of the network.

To improve network performance and security, run the undo icmp receive command to disable the system from receiving ICMP packets of a specified type.

Precautions

In normal network conditions, you can run the icmp receive command to restore the function to receive ICMP packets.

Example

# Disable GE0/1/1 from receiving Timestamp Request messages.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet0/1/1
[~HUAWEI-GigabitEthernet0/1/1] undo icmp name timestamp-request receive