configure ip-security anomaly-protection icmp ipv6-max-size

configure ip-security anomaly-protection icmp ipv6-max-size size {slot [ slot | all ]}

Description

Configures the maximum ipv6 ICMP allowed size.

Syntax Description

size Specifies the size of the IPv6 ICMP in bytes.
slot Specifies the slot to be used.
all Specifies all IP addresses, or all IP addresses in a particular state.

Default

The default size is 512 bytes.

Usage Guidelines

This command configures the IPv6 ICMP allowed size. The absolute maximum is 16K bytes.

You can use this command to configure the maximum IPv6 ICMP packet size for detecting IPv6 ICMP anomalies. If the next header in the IPv6 ICMP packet is not 0x3A:ICMP, this anomaly is not detected. For example, an IPv6 ICMP packet with packet header 0x2c: Fragment Header is not detected.

History

This command was first available in ExtremeXOS 12.0.

Platform Availability

This command is only available on the Summit X440, X460, X460-G2, X480, X670, X670-G2, and X770 platforms, whether or not included in a SummitStack, and on the BlackDiamond X8 series switches, BlackDiamond 8000 c-, e-, xl-, and xm-series modules.