HP MSR2000/3000/4000 Router Series Layer 3 - IP Services Command Reference

240
Syntax
ipv6 icmpv6 multicast-echo-reply enable
undo ipv6 icmpv6 multicast-echo-reply enable
Default
The device is disabled from replying to multicast echo requests.
Views
System view
Predefined user roles
network-admin
Usage guidelines
If a host is configured to reply to multicast echo requests, an attacker can use this mechanism to attack
the host. For example, if Host A (an attacker) sends an echo request to a multicast address with Host B as
the source, all hosts in the multicast group send echo replies to Host B.
To prevent attacks, do not enable the device to reply to multicast echo requests unless necessary.
Examples
# Enable replying to multicast echo requests.
<Sysname> system-view
[Sysname] ipv6 icmpv6 multicast-echo-reply enable
ipv6 icmpv6 source
Use ipv6 icmpv6 source to specify an IPv6 address as the source address for outgoing ICMPv6 packets.
Use undo ipv6 icmpv6 source to restore the default.
Syntax
ipv6 icmpv6 source [ vpn-instance vpn-instance-name ] ipv6-address
undo ipv6 icmpv6 source [ vpn-instance vpn-instance-name ]
Default
The device uses the IPv6 address of the sending interface as the source IPv6 address for outgoing
ICMPv6 packets.
Views
System view
Predefined user roles
network-admin
Parameters
vpn-instance vpn-instance-name: Specifies the VPN instance to which the specified address belongs. The
vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The specified VPN instance
must already exist. If the specified IPv6 address is on the public network, do not use this option.
ipv6-address: Specifies an IPv6 address.