Enabling replying to multicast echo requests
If hosts are configured to answer multicast echo requests, an attacker can use this mechanism to attack a host. For example, if Host A (an attacker) sends an echo request with the source being Host B to a multicast address, all hosts in the multicast group will send echo replies to Host B. To prevent such an attack, disable a device from answering multicast echo requests by default. In some application scenarios, however, you must enable the device to answer multicast echo requests.
To enable replying to multicast echo requests:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable replying to multicast echo requests. | ipv6 icmpv6 multicast-echo-reply enable | Not enabled by default |