ip

system ip
Devices

IPv4 settings

system ip arp
Devices

Parameters for ARP cache

system ip arp table-size <txt>
Devices

Maximum number of entries to keep in the ARP cache

Values:
  • u32 – Maximum ARP entries number

system ip disable-forwarding
Devices Licenses

Disable IPv4 forwarding

system ip disable-tunnel-ecn-check
Devices

Disable ECN packet drops in IP tunnels

system ip exec-vrf-nfhooks
Devices

Do not bypass netfilter hooks when traversing VRFs

system ip fragment-time <u32>
Devices

Time in seconds to keep an IP fragment in memory

Values:
  • u32 – Number of seconds (0-2147483647)

system ip icmp
Devices

Parameters for ICMP

system ip icmp echo-ignore
Devices

Do not reply to ICMP echo requests

system ip icmp no-send-redirects
Devices

Disable sending ICMP redirect messages

system ip icmp rate
Devices

ICMP types to be limited

system ip icmp rate limit <u32>
Devices

Minimum elapsed time between ICMP packets sent to the same host

Applies only to selected ICMP types

Values:
  • u32 – Number of milliseconds (0-2147483647)

system ip icmp rate messages-burst <u32>
Devices

Maximum burst size for ICMP packets sent

Applies only to selected ICMP types

Values:
  • u32 – Number of packets (0-2147483647)

system ip icmp rate messages-per-second <u32>
Devices

Rate of ICMP packets sent

Applies only to selected ICMP types

Values:
  • u32 – Number of messages per second (0-2147483647)

system ip icmp rate type <txt>
Devices
Values:
  • txt

    List of ICMP types to be rate limited

    Defaults to destination_unreachable, source_quench, time_exceeded and parameter_problem

Instances:

List of values

system ip igmp
Devices Licenses

Parameters for IGMP

system ip igmp max-memberships <u32>
Devices Licenses

Maximum number of multicast groups to be subscribed

Values:
  • u32 – Number of group memberships (0-5459)

system ip route
Devices

Parameters for IPv4 Routing

system ip route accept-routes-with-linkdown
Devices

Don’t ignore routes whose corresponding network interface is down during a FIB lookup

system ip route accept-src-route
Devices

Accept packets with a source route option

system ip route local-vrf-leaking-mode <txt>
Devices

Local VRF leaking mode

Values:
  • disabled – Disable local VRF leaking

  • only-pbr – Enable PBR-based VRF leaking

  • only-unicast – Enable unicast VRF leaking

  • enabled – Enable local VRF leaking

system ip verify-source-address
Devices

Turn on Source Address Verification to enable IP spoofing protection