Hi,
The Security team has requested that they look over our router and switch configs before we deploy them in production.
One thing they mentioned:
"Bad Error Message Protection"
They recommend "setting icmp ignore bogus error responses to 1". I haven't found any Cisco docs on the subject or any commands to enable this. That being said, I haven't tried to configure any bad error message commands because if this is a real concern I want to make sure I am doing it correctly.
Any advice?
Thank you.