The firewall defend icmp-unreachable enable command enables the ICMP unreachable packet attack defense.
The undo firewall defend icmp-unreachable enable command disables the ICMP unreachable packet attack defense.
firewall defend icmp-unreachable enable
undo firewall defend icmp-unreachable enable
None
System view
2: Configuration level
By default, the ICMP unreachable packet attack defense is disabled.
# Enable the ICMP unreachable packet attack defense.
<sysname> system-view [sysname] firewall defend icmp-unreachable enable