[c-nsp] Under attack, need help with ACL....

Pekka Savola pekkas at netcore.fi
Wed Nov 3 00:06:28 EST 2004


On Tue, 2 Nov 2004, Rodney Dunn wrote:
> 101_(config)#ip icmp rate-limit unreachable ?
>  <1-4294967295>  Once per milliseconds
>  DF              code 4, fragmentation needed and DF set
>
> default is one per 500 msec.

That would be really stupid if that was the case (e.g., breaks 
traceroutes)  Don't you have some kind of token bucket?

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


More information about the cisco-nsp mailing list