cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
284
Views
0
Helpful
1
Replies

Squelch router's response to ICMP unreachables....

abatson
Beginner
Beginner

In order to squeeze every drop of performance from my routers, I think I'd seen where a router can be told not to respond with ICMP Unreachable messages. People scanning our network from the Internet & other scanning behaviour for networks that we don't route, cause ICMP unreachables. How do I teach my router to simply drop the packet, and provide NO response back to the sender.

My routers interfaces are just two DS1, and a FastEthernet interface, both with MTUs of 1500 bytes, so there shouldn't be any pathMTU discovery issues with turning off the ICMP Unreachable messages.

-Alex

1 Reply 1

samsam_wang
Beginner
Beginner

Try

under interface

no ip unreachables

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: