firewall defend icmp-unreachable fragment-needed enable

Function

The firewall defend icmp-unreachable fragment-needed enable command enables the ICMP unreachable fragment packet attack defense.

The undo firewall defend icmp-unreachable fragment-needed enable command disables the ICMP unreachable fragment packet attack defense.

firewall defend icmp-unreachable fragment-needed enable

undo firewall defend icmp-unreachable fragment-needed enable

None

System view

2: Configuration level

By default, the ICMP unreachable fragment packet attack defense is disabled.

# Enable the ICMP unreachable fragment packet attack defense.

<sysname> system-view
[sysname] firewall defend icmp-unreachable fragment-needed enable