IA statistics on a specific interface. Privileged EXEC mode This command is supported for ICX8200 devices only. You can clear all PPPoE IA statistics for a device or for a specific interface. The following example removes the statistics from a device. device# clear pppoe intermediate-agent
ip tcp fin-urg-psh ip tcp fin-urg-psh ip tcp fin-urg-psh Drops TCP control packets with FIN URG and PSH flags set. ip tcp fin-urg-psh no ip tcp fin-urg-psh By default, the packets are not dropped. Global configuration mode This command is supported for ICX 8100 and ICX8200 devices only. The no
Unicast Reverse Path Forwarding Feasibility Unicast Reverse Path Forwarding Feasibility Unicast Reverse Path Forwarding Feasibility The following table provides support information about uRPF. uRPF is not supported on ICX8200 devices. uRPF Feasibility Device Configurable Mode ECMP Route Supported
VXLAN - Virtual Extensible LAN VXLAN - Virtual Extensible LAN VXLAN - Virtual Extensible LAN Feature ICX 7150 ICX 7150-ES ICX 7550 ICX 7650 ICX 7850 ICX 8100 ICX8200 VXLAN support No No 09.0.10a 08.0.95 08.0.95 No No MACsec over VXLAN No No 09.0.10a No 09.0.10a No No VXLAN with Routing in and out
range that is a member of a VLAN group or any reserved VLAN. Otherwise, configurations fail on the entire range. ACLs are supported on member ports of a VLAN on which DHCPv6 snooping is enabled. Refer to About client IP-to-MAC address mappings for more information. On ICX 8100 and ICX8200 devices
. Global configuration mode This command is supported for ICX 8100 and ICX8200 devices only. The no form of the command removes the configuration. The following example configures the ICX device to drop TCP packets sent using the MAC Multicast mechanism, which is erroneous and could signal a DDOS attack. device# configure terminal device(config)# ip tcp over-mac-multicast Release version Command history 10.0.00 This command was introduced.
on ICX8200 devices. The following example displays output of the show statistics dos-attack command. device# show statistics dos-attack ------------------------------ Local Attack Statistics ------------------------- ICMP TCP-SYN
. Global configuration mode This command is supported for ICX 8100 and ICX8200 devices only. The no form of the command removes the configuration. The following example configures the ICX device to drop TCP packets sent using the MAC Multicast mechanism, which is erroneous and could signal a DDOS attack. device# configure terminal device(config)# ip tcp over-mac-multicast Release version Command history 10.0.00 This command was introduced.