How to disable the tracert function on S series switches

S series switches (except the S1700) send ICMP Time Exceeded messages to obtain IP addresses of each hops using tracert. You can disable an interface from sending ICMP Time Exceeded messages to disable the tracert function. The configuration method is as follows:
Disable VLANIF 100 from sending ICMP Time Exceeded messages.
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] undo icmp ttl-exceeded send

Scroll to top