topic Re: EXOS: how to disable icmp redirect in ExtremeSwitching (EXOS/Switch Engine)

EXOS: how to disable icmp redirect

M_Nees — Wed, 25 Sep 2019 14:30:17 GMT

on EOS i disable icmp redirect on a layer 3 interface this way:

code:

conf t
int vlan.0.1000
no ip redirects
exit

How can i achieve that on EXOS ?

Is there no cli command available ?

Attaching a ACL on every L3 interface which discard icmp redirects is technically possible BUT not manageable in the field.

BR

Re: EXOS: how to disable icmp redirect

OscarK — Wed, 25 Sep 2019 14:37:18 GMT

* X450G2-24t-G4.1 # disable icmp redirects
Execute the command
ipv6 IPv6 address family
vlan vlan
vlan name
"Default" "Mgmt"

Re: EXOS: how to disable icmp redirect

M_Nees — Wed, 25 Sep 2019 14:42:40 GMT

Thanks OscarK!

CLI reference tell me this important additional command:

code:

disable icmp useredirects

Disables the modifcation of route table information when an ICMP redirect message is received.

Re: EXOS: how to disable icmp redirect

M_Nees — Wed, 25 Sep 2019 14:50:58 GMT

code:

disable icmp useredirects

Usage Guidelines

This option only applies to the switch when the switch is not in routing mode.
If the switch has a route to a destination network, the switch uses that router as the gateway to forward
the packets to. If that router knows about a better route to the destination, and the next hop is in the
same subnet as the originating router, the second router sends an ICMP redirect message to the frst
router. If ICMP useredirects is disabled, the switch disregards these messages and continues to send the
packets to the second router.