Users Guide

Table 105. Suppressed ICMP message types (continued)
ICMPv4 message types
Address mask request (17)
Address mask reply (18)
NOTE: The Dell EMC Networking OS does not suppress the ICMP message type echo request (8).
Table 106. Suppressed ICMPv6 message types
ICMPv6 message types
Destination unreachable (1)
Time exceeded (3)
IPv6 header bad (4)
Echo reply (129)
Who are you request (139)
Who are you reply (140)
Mtrace response (200)
Mtrace messages (201)
NOTE: The Dell EMC Networking OS does not suppress the following ICMPv6 message types:
● Packet too big (2)
● Echo request (128)
● Multicast listener query (130)
● Multicast listener report (131)
● Multicast listener done (132)
● Router solicitation (133)
● Router advertisement (134)
● Neighbor solicitation (135)
● Neighbor advertisement (136)
● Redirect (137)
● Router renumbering (138)
● MLD v2 listener report (143)
● Duplicate Address Request (157)
● Duplicate Address Confirmation (158)
SSH Lockout Settings
The system has a SSH protection mechanism which, by default, allows 10 login attempts (success or failure) per minute. After
the 10th attempt, the system blocks the user login for one minute (since the first login attempt) before allowing the next set of
login attempts. With Dell EMC Networking OS version 9.11(0.0), the SSH protection mechanism has been enhanced to allow 60
login attempts (success or failure) per minute. After 60 attempts, the system blocks the user login for a maximum rate interval
which can be specified by the user using the ip ssh connection-rate-interval CLI command. The ip ssh
connection-rate-lockout CLI command ensures a minimum blocking time after the rate limit has been exceeded.
For more information on the commands, please refer the CLI Reference Guide for the respective system.
Security
811