Configuring Threshold Values for ICMP Packets Globally

Setting the threshold values for ICMP packets in global configuration mode.
  1. Enter the global configuration mode to set the values globally. 
    device# configure terminal
  2. Set the threshold values for ICMP packets at the router. 
    device(config)# ip icmp attack-rate burst-normal 2000 burst-max 2500 lockup 300
    In the above example, if incoming ICMP traffic exceeds 2000 Kbps, the excess packets are dropped. If the incoming ICMP traffic exceeds 2500 Kbps, the device drops all ICMP packets for the next 300 seconds.
Parent topic: Avoiding Being a Victim in a Smurf Attack