H3C Technologies H3C S5560 Series Switches - Manual (Page 140)

125
Optimizing IP performance
A customized configuration can help optimize overall IP performance. This chapter describes various
techniques you can use to customize your installation.
NOTE:
The term "interface" in this chapter collectively refers to Layer 3 interfaces, including VLAN interfaces and
Layer 3 Ethernet interfaces. You can set an Ethernet port as a Layer 3 interface by using the port link-mode
route command (see Layer 2—LAN Switching Configuration Guide).
Enabling an interface to receive and forward
directed broadcasts destined for the directly
connected network
A directed broadcast packet is destined for all hosts on a specific network. In the destination IP address
of the directed broadcast, the network ID identifies the target network, and the host ID is made up of all
ones.
If an interface is allowed to forward directed broadcasts destined for the directly connected network,
hackers can exploit this vulnerability to attack the target network. In some scenarios, however, an
interface must receive and send such directed broadcast packets to support UDP helper.
This task enables an interface to accept directed broadcast packets that are destined for and received
from the directly connected network to support UDP helper. UDP helper converts the directed broadcasts
to unicasts and forwards them to a specific server.
The task also enables the interface to forward directed broadcast packets that are destined for the
directly connected network and are received from another subnet to support Wake on LAN. Wake on
LAN sends the directed broadcasts to wake up the hosts on the target network.
Configuration procedure
To enable an interface to receive and forward directed broadcasts destined to the directly connected
network:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Enable the interface to receive
and forward directed
broadcasts destined for the
directly connected network.
ip forward-broadcast
By default, an interface cannot
receive or forward directed
broadcasts destined for the directly
connected network.