JN0-102 · Question #397
Click the Exhibit button. Referring to the exhibit, what happens when ping packets are sent to the management interface address of the local router?
The correct answer is D. The ping packets are silently discarded.. By default, Junos devices often silently discard ping packets sent to their management interface address from external sources for security reasons.
Question
Click the Exhibit button. Referring to the exhibit, what happens when ping packets are sent to the management interface address of the local router?
Options
- AAn ICMP redirect message is returned.
- BAn ICMP error message is returned.
- CThe ping packets are accepted.
- DThe ping packets are silently discarded.
How the community answered
(14 responses)- C7% (1)
- D93% (13)
Why each option
By default, Junos devices often silently discard ping packets sent to their management interface address from external sources for security reasons.
An ICMP redirect message is used to inform a host of a better route, not for traffic destined to the router itself.
While an ICMP error message could be returned if traffic is explicitly rejected, silent discard is a common default behavior for unallowed host-bound traffic on Juniper devices.
Ping packets are generally not accepted by default on management interfaces unless specific firewall rules are configured to permit them.
Junos OS devices typically employ a default host-bound firewall filter that silently discards unsolicited inbound traffic, including ICMP echo requests (pings), destined for the router's management interface address, unless explicitly allowed by a configured filter. This security measure prevents reconnaissance and protects the control plane.
Concept tested: Junos default host-bound traffic behavior
Source: https://www.juniper.net/documentation/us/en/software/junos/junos-policy/topics/topic-map-understanding-the-default-policies-for-transit-traffic.html
Topics
Community Discussion
No community discussion yet for this question.