icmp send (interface view)

Function

The icmp send command enables the interface to send ICMP packets of a specified type.

The undo icmp send command disables the interface from sending ICMP packets of a specified type.

By default, the system is enabled to send ICMP packets.

Format

icmp name { echo | echo-reply | net-unreachable | parameter-problem | timestamp-reply | timestamp-request | ttl-exceeded } send

icmp name reassembly-timeout send

icmp name port-unreachable send

icmp name fragmentneed-dfset send

icmp name source-route-failed send

icmp type typevalue code codevalue send

icmp name { echo | echo-reply | net-unreachable | parameter-problem | timestamp-reply | timestamp-request | ttl-exceeded } send inherent-global

icmp name reassembly-timeout send inherent-global

icmp name port-unreachable send inherent-global

icmp name fragmentneed-dfset send inherent-global

icmp name source-route-failed send inherent-global

icmp type typevalue code codevalue send inherent-global

icmp all send inherent-global

undo icmp name { echo | echo-reply | net-unreachable | parameter-problem | timestamp-reply | timestamp-request | ttl-exceeded } send

undo icmp name reassembly-timeout send

undo icmp name port-unreachable send

undo icmp name fragmentneed-dfset send

undo icmp name source-route-failed send

undo icmp type typevalue code codevalue send

Parameters

Parameter	Description	Value
echo	Enables the device to send ICMP echo request packets.	-
echo-reply	Enables the device to send ICMP echo reply packets.	-
net-unreachable	Enables the device to send net-unreachable packets.	-
parameter-problem	Enables the device to send parameter-problem packets.	-
timestamp-reply	Enables the device to send Timestamp Reply packets.	-
timestamp-request	Enables the device to send Timestamp Request packets.	-
ttl-exceeded	Enables the device to send ICMP TTL Exceeded packets.	-
name	Enables the device to receive ICMP packets with a specified name.	-
reassembly-timeout	Enables the device to send reassembly-timeout packets.	-
port-unreachable	Enables the device to send ICMP port-unreachable packets.	-
fragmentneed-dfset	Enables the device to send fragmentneed-DFset packets.	-
source-route-failed	Enables the device to send source-route-failed packets.	-
type typevalue	Enables the system to send ICMP packets with a specified type.	The value is an integer ranging from 0 to 255.
code codevalue	Enables the system to send ICMP packets with a specified code.	The value is an integer ranging from 0 to 255.
inherent-global	restores the ICMP receiving configuration in the interface view to the system.	-
all	All ICMP types.	-

Views

100ge sub-interface view, 100GE interface view, 10GE sub-interface view, 10GE interface view, 200GE sub-interface view, 25GE sub-interface view, 25GE interface view, 400GE sub-interface view, 400GE interface view, 40GE sub-interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, FlexE interface view, GE optical interface view, GE sub-interface view, GE interface view, GE electrical interface view, GMPLS-UNI interface view, Global VE sub-interface view, LMP interface view, Loopback interface view, MTI interface view, Mtunnel view, PW-VE sub-interface view, PW-VE interface view, Tunnel interface view, VBDIF interface view, VE sub-interface view, VLANIF interface view, Management interface view, Virtual template view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ip-stack	write

Usage Guidelines

Usage Scenario

In normal situations, the system can properly send ICMP packets. In case of heavy network traffic, if hosts or ports are frequently unreachable, routers send a large number of ICMP packets, which causes heavy traffic burden and performance deterioration. In addition, network attackers often use ICMP error packets to spy on the internal structure of the network.

To improve network performance and security, run the undo icmp send command to disable the system from sending ICMP packets of a specified type.

Precautions

When the network is in good condition, you can run the icmp send command to enable the interface to send ICMP packets.

In the case of network unreachable and host unreachable, the standard protocol does not require that the routing device must respond with a host unreachable packet. Currently, the router can respond with a network unreachable packet when it receives a packet and cannot find the routing table. In FIB Miss scenarios, the device does not respond to network unreachable packets by default. In ARP Miss scenarios, the device cannot respond to network unreachable packets and triggers ARP learning.

Example

# Disable GE0/1/1 from sending Timestamp Request messages.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet0/1/1
[~HUAWEI-GigabitEthernet0/1/1] undo icmp name timestamp-request send