F3215-HP Load Balancing Module Network Management Configuration Guide-6PW101

353
If an attacker sends abnormal traffic that causes the device to generate ICMPv6 destination unreachable
messages, end users may be affected. To prevent such attacks, you can disable the device from sending
ICMPv6 destination unreachable messages.
To enable sending ICMPv6 destination unreachable messages:
Ste
p
Command Remarks
1. Enter system view. system-view N/A
2. Enable sending ICMPv6 destination
unreachable messages.
ipv6 unreachables enable Disabled by default.
Enabling sending ICMPv6 redirect messages
When a device receives a large number of attack packets that require the device to send ICMPv6 redirect
packets, the device's performance is degraded for processing these packets. To protect the device from
such attacks, you can use the undo form of the following command to disable sending ICMPV6 redirect
packets.
To enable sending ICMPv6 redirect messages:
Ste
p
Command Remarks
1. Enter system view system-view N/A
2. Enable sending ICMPv6
redirect messages
ipv6 redirects enable
Optional.
By default, this function is disabled.
Displaying and maintaining IPv6 basics
configuration
Task Command Remarks
Display IPv6 FIB entries.
display ipv6 fib [ vpn-instance vpn-instance-name ]
[ acl6 acl6-number | ipv6-prefix ipv6-prefix-name ]
[ | { begin | exclude | include }
regular-expression ]
Available in any
view.
Display the IPv6 FIB entry of a
specified destination IPv6
address.
display ipv6 fib [ vpn-instance vpn-instance-name ]
ipv6-address [ prefix-length ] [ | { begin | exclude |
include } regular-expression ]
Available in any
view.
Display the IPv6 information of
an interface.
display ipv6 interface [ interface-type
[ interface-number ] ] [ brief ] [ | { begin | exclude
| include } regular-expression ]
Available in any
view.
Display IPv6 prefixes
information.
display ipv6 prefix [ prefix-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any
view.
Display neighbor information.
display ipv6 neighbors { ipv6-address | all |
dynamic | interface interface-type
interface-number | static | vlan vlan-id } [ verbose ]
[ | { begin | exclude | include }
regular-expression ]
Available in any
view.