Administrator Guide

This module requires NAS for handling the access challenge from the RADIUS server. NAS sends the input OTP in an Access-Request to

the RADIUS server, and the user authentication succeeds or fails depending upon the Access-Accept or Access-Reject response received

at NAS from the RADIUS server.

Configuring the System to Drop Certain ICMP

Reply Messages

You can configure the Dell EMC Networking OS to drop ICMP reply messages. When you configure the drop icmp command, the

system drops the ICMP reply messages from the front end and management interfaces. By default, the Dell EMC Networking OS

responds to all the ICMP messages.

• Drop the ICMP or ICMPv6 message type.

drop {icmp | icmp6}

CONFIGURATION mode.

You can configure the Dell EMC Networking OS to suppress the following ICMPv4 and ICMP6 message types:

Table 85. Suppressed ICMP message types

ICMPv4 message types

Echo reply (0)

All sub types of destination unreachable (3)

Source quench (4)

Redirect (5)

Router advertisement (9)

Router solicitation (10)

Time exceeded (11)

IP header bad (12)

Timestamp request (13)

Timestamp reply (14)

Information request (15)

Information reply (16)

Address mask request (17)

Address mask reply (18)

NOTE: The Dell EMC Networking OS does not suppress the ICMP message type echo request (8).

Table 86. Suppressed ICMPv6 message types

ICMPv6 message types

Destination unreachable (1)

Time exceeded (3)

IPv6 header bad (4)

Echo reply (129)

704 Security