Bcast/Mcast ICMP not allowed when configured as best practices

[Aviv_Kedem]

Hello community,

AP7532 versions: 5.9.1.4 - 5.9.3.3

Receiving many logs: %DATAPLANE-4-DOSATTACK: BAD_PACKET:  Bcast/Mcast ICMP not allowed

But I had disabled it in the firewall policy (from best practices) :

show running-config firewall-policy default include-factory | include broadcast-multicast-icmp

no ip dos broadcast-multicast-icmp

Why the messages are still appears ?

Thanks

Aviv

[Aviv_Kedem]

Hello Robert,

I’ll test it.

Thanks

[RobertZ]

I don't recall if this was a bug in firmware 5.9.1 or 5.9.3. Since you are on very old firmware it will be beneficial for you to upgrade to current firmware version 5.9.7 and retest. 

[Aviv_Kedem]

Hello Robert,

It already was configured.

I think there is some bug.

 These logs are appears even if the feature is disabled.

Thanks

Aviv

[RobertZ]

Please apply the best practice for the firewall and make sure you behave it applied to the AP profile.

FireWall Best Practice