Siemens S223, S323 user manual IP TCP Flag Control, Policy of unreached messages, RST Configuration

User Manual	UMN:CLI
SURPASS hiD 6615 S223/S323 R1.5

The following is an example for configuring ICMP Redirect Message and checking the configuration.

SWITCH(config)# show running-config

(omitted)

interface 1

ip address 222.121.68.247/24

!

!

!

SWITCH(config)# ip redirects SWITCH(config)# show running-config

(omitted)

interface 1

ip address 222.121.68.247/24

!!

ip redirects

!

!

SWITCH(config)#

7.14.4The policy of unreached messages

When the packets can’t reach Destination host or the network, the switch is supposed to bring them back to the source IP address. What if too many unreached packets are com- ing into the system, it might cause slow down the system operation.

Not to bring these messages back to source IP address on a specific interface, use the following command on Interface Configuration mode.

Command	Mode	Description
ip unreachables		Configures not to bring unreached messages back to
		their source IP address on interface.
	Interface
no ip unreachables		Brings all unreached messages back to their source IP
		address on interface.

7.15IP TCP Flag Control

TCP (Transmission Control Protocol) header includes six kinds of flags that are URG, ACK, PSH, RST, SYN, and FIN. For the hiD 6615 S223/S323, you can configure RST and SYN as the below.

7.15.1RST Configuration

RST sends a message when TCP connection can not be done to a person who tries to make it. However, it is also possible to configure to block the message. This function will

A50010-Y3-C150-2-7619 173