ā01-13-2021 11:48 PM
Hi Dear Friend
Question 1
How increase TTL In switch nexus For Hide my switch in Traceroute
Switch On layer 3 (no Switchport)
Question 2
How Blog Time exceeded Msg For Block Traceroute Tarffic for Specify Destnation On switch nexus 3000?
ā01-14-2021 03:18 AM
no tag-switching ip propagate-ttl forwarded - this command we use generally for MPLS.
if you looking traditional then you need to block Type 3 echo ICMP i guess- never tested.
ā01-14-2021 06:28 AM
I donnot RUN mpls on switch This Swtich in Layer3 and Gateway For few Servers
ā01-14-2021 07:11 AM
Easiest way I see is to configure IP access-lists, which blocks ICMP or UDP/PORT 334xx destined to the SVI, and apply that RACL on the SVI ingress. However, I would recommend not to do that, because it will remove some capability to troubleshoot on your Nexus switch. In the end Nexus is not a firewall, it's a L3 Switch.
Stay safe,
Sergiu
ā01-22-2021 05:19 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide