Configuring ICMP Message Handling

Internet Control Message Protocol (ICMP) is one of the core protocols of the Internet Protocol suite. It's used by network devices such as routers to send error messages indicating, for example, that a requested service is unavailable.

You can configure the device to handle ICMP messages as follows:

■

Send and receive ICMP Redirect messages.

■

Send ICMP Destination Unreachable messages. The device sends this message in response to a packet that cannot be delivered to its destination for reasons other than congestion. The device sends these messages upon any of the following:

●

Address unreachable

●

Port unreachable

This feature is applicable to IPv4 and IPv6 addressing schemes.

■

Limit the number of incoming ICMP echo requests to 100 packets per second, or allow an unlimited number of incoming requests. Limiting ICMP echo requests may be useful for protecting the device against ping flooding (DDoS attacks).

■

Block incoming ICMP timestamp requests.

➢

To configure ICMP message handling:

1.

Open the Network Settings page (Setup menu > IP Network tab > Advanced folder > Network Settings).

2.

Under the ICMP group, do the following:

●

To enable sending and receipt of ICMP Redirect messages, configure the 'Send and Received ICMP Redirect Messages' [DisableICMPRedirects] parameter to Enable.

●

To enable sending of ICMP Destination Unreachable messages, configure the 'Don't Send ICMP Unreachable Messages' [DisableICMPUnreachable] parameter to Disable.

●

To enable or disable limiting the number of incoming ICMP echo requests, from the 'Enable ICMP Echo Requests Rate Limiting' drop-down list, select Enable or Disable, respectively:

3.

Click Apply.

4.

To block incoming ICMP timestamp requests and therefore, prevent the device from replying to these requests (for security reasons), configure the ini file parameter [BlockIcmpTimeStamp] to 1.