Disable ICMP Redirects - C9300 16.12.4

[Barry Landon]

I would like to disable icmp redirects on C9300 running CAT9K IOSXE 16.12.4.  We have a environment that uses static routes to reach its destinations.  Security have advised to disable ICMP redirects on the host but the command no ip redirects doesnt seem to exist globally or inteface level.  Could someone advise? 

[balaji.bandi]

Cat 9300 has CoPP

check below :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-12/configuration_guide/sec/b_1612_sec_9300_cg/configuring_control_plane_policing.html

you can check with the below command :

show ip redirects

[Reza Sharifi]

Hi,

On the 9300 series, you can disable it under the SVI interface.

example:

config t

inter vlan x

no ip redirects

HTH