Enabling sending ICMPv6 destination unreachable messages

If the device fails to forward a received IPv6 packet because of one of the following reasons, it drops the packet and sends a corresponding ICMPv6 Destination Unreachable error message to the source.

If an attacker sends abnormal traffic that causes the device to generate ICMPv6 destination unreachable messages, end users may be affected. To prevent such attacks, you can disable the device from sending ICMPv6 destination unreachable messages.

To enable sending ICMPv6 destination unreachable messages:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable sending ICMPv6 destination unreachable messages.

ipv6 unreachables enable

Disabled by default