Cisco CSS 11501 Getting Started Guide - Page 61

Discarding ICMP Redirects on the Ethernet Management Port

Get Cisco CSS 11501 - Content Services Switch PDF manuals and user guides
UPC - 746320761664
View all Cisco CSS 11501 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 61 highlights

Chapter 2 Configuring CSS Basics Configuring the Ethernet Management Port To disable the default gateway and set it to an IP address of 0.0.0.0, use the no form of the gateway address command. For example: config-boot)# no gateway address A default gateway of 0.0.0.0 for the Ethernet management port does not appear in the show boot-config command output for the CSS boot configuration. Discarding ICMP Redirects on the Ethernet Management Port By default, the Ethernet management port accepts all incoming ICMP redirects. If you do not configure static routes for the management port, the CSS disregards any ICMP redirect packets. However, when you configure static routes for the management port, the CSS incorporates the ICMP redirects to the port as an entry in the routing table. To enhance security on the CSS when you configure static routes on the management port, we strongly recommend that you configure the CSS management port to discard ICMP redirects. Note The Ethernet management port never transmits an ICMP redirect. If you remove a static route when the management port is configured to accept ICMP redirect packets, the CSS removes from the routing table the router entry created by the ICMP redirects associated with the static route. To configure the CSS to discard ICMP redirect packets on the Ethernet management port, enter: (config)# ip management no-icmp-redirect To reset the default behavior of accepting ICMP redirect packets on the Ethernet management port, enter: (config)# no ip management no-icmp-redirect To view whether the management port accepts or discards ICMP redirect packets, use the show ip configuration command to display the IP Management Port ICMP redirect field. When the port accepts ICMP redirects, the field entry displays enable. When the port discards ICMP redirects, the field entry displays disable. OL-6037-01 Cisco Content Services Switch Getting Started Guide 2-13

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
2-13
Cisco Content Services Switch Getting Started Guide
OL-6037-01
Chapter 2
Configuring CSS Basics
Configuring the Ethernet Management Port
To disable the default gateway and set it to an IP address of 0.0.0.0, use the
no
form of the
gateway address
command. For example:
config-boot)#
no gateway address
A default gateway of 0.0.0.0 for the Ethernet management port does not appear in
the
show boot-config
command output for the CSS boot configuration.
Discarding ICMP Redirects on the Ethernet Management Port
By default, the Ethernet management port accepts all incoming ICMP redirects.
If you do not configure static routes for the management port, the CSS disregards
any ICMP redirect packets. However, when you configure static routes for the
management port, the CSS incorporates the ICMP redirects to the port as an entry
in the routing table.
To enhance security on the CSS when you configure static routes on the
management port, we strongly recommend that you configure the CSS
management port to discard ICMP redirects.
Note
The Ethernet management port never transmits an ICMP redirect.
If you remove a static route when the management port is configured to accept
ICMP redirect packets, the CSS removes from the routing table the router entry
created by the ICMP redirects associated with the static route.
To configure the CSS to discard ICMP redirect packets on the Ethernet
management port, enter:
(config)#
ip management no-icmp-redirect
To reset the default behavior of accepting ICMP redirect packets on the Ethernet
management port, enter:
(config)#
no ip management no-icmp-redirect
To view whether the management port accepts or discards ICMP redirect packets,
use the
show ip configuration
command to display the IP Management Port
ICMP redirect field. When the port accepts ICMP redirects, the field entry
displays enable. When the port discards ICMP redirects, the field entry displays
disable.