Enabling replying to multicast echo requests

If hosts are configured to answer multicast echo requests, an attacker can use this mechanism to attack a host. For example, if Host A (an attacker) sends an echo request with the source being Host B to a multicast address, all hosts in the multicast group will send echo replies to Host B. To prevent such an attack, disable a device from answering multicast echo requests by default. In some application scenarios, however, you must enable the device to answer multicast echo requests.

To enable replying to multicast echo requests:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable replying to multicast echo requests.

ipv6 icmpv6 multicast-echo-reply enable

Not enabled by default