Siemens S323 User Manual

Page of 381
User Manual                                                                               UMN:CLI 
SURPASS hiD 6615 S223/S323 R1.5 
A50010-Y3-C150-2-7619                                                                         173 
The following is an example for configuring ICMP Redirect Message and checking the 
configuration. 
SWITCH(config)# show running-config 
 
(omitted) 
 
interface 1 
 ip address 222.121.68.247/24 
SWITCH(config)# ip redirects 
SWITCH(config)# show running-config 
 
(omitted) 
 
interface 1 
 ip address 222.121.68.247/24 
!! 
ip redirects 
SWITCH(config)# 
 
 
7.14.4 
The policy of unreached messages 
When the packets can’t reach Destination host or the network, the switch is supposed to 
bring them back to the source IP address. What if too many unreached packets are com-
ing into the system, it might cause slow down the system operation.     
Not to bring these messages back to source IP address on a specific interface, use the 
following command on Interface Configuration mode. 
Command Mode 
Description 
ip unreachables 
Configures not to bring unreached messages back to 
their source IP address on interface. 
no ip unreachables 
Interface 
Brings all unreached messages back to their source IP 
address on interface. 
 
7.15 
IP TCP Flag Control 
TCP (Transmission Control Protocol) header includes six kinds of flags that are URG, 
ACK, PSH, RST, SYN, and FIN. For the hiD 6615 S223/S323, you can configure RST 
and SYN as the below. 
 
7.15.1 RST 
Configuration 
RST sends a message when TCP connection can not be done to a person who tries to 
make it. However, it is also possible to configure to block the message. This function will