Blocking ICMP Timestamp Requests

The ICMP protocol allows for network timing measurements by sending an ICMP timestamp request to a remote peer and receiving an ICMP timestamp in reply. However, sending ICMP timestamp replies may expose peers to security vulnerabilities.

By default, the device accepts ICMP timestamps and replies accordingly. You can block incoming ICMP timestamp requests and thereby prevent the device from replying to them, by uploading an ini file to the device with the ini file parameter [BlockIcmpTimeStamp] set to 1.

This feature is applicable only to Mediant 90xx and Mediant Software.