Technical Documentation

Configuring Martian Addresses (NSM Procedure)

Martian addresses are host or network addresses about which all routing information is ignored. They commonly are sent by improperly configured systems on the network and have destination addresses that are obviously invalid. You can configure a particular martian address or a range of martian addresses as allowed or disallowed. You can use the match criteria to configure a range of martian addresses.

To configure a martian address in NSM:

  1. In the navigation tree, select Device Manager > Devices .
  2. In the Devices list, double click the device to select it.
  3. Click the Configuration tab.
  4. In the configuration tree, expand Routing Options.
  5. Select Martians.
  6. Add or modify the parameters as specified in Table 1.
  7. Click one:
    • OK—To save the changes.
    • Cancel—To cancel the modifications.
    • Apply—To apply the routing option settings.

Note: After you make changes to a device configuration, you must push that updated device configuration to the physical security device for those changes to take effect. You can update multiple devices at one time. See the Updating Devices section in the Network and Security Manager Administration Guide for more information.

Table 1: Configuring Martian Address Fields

Option

Function

Your Action

Address

Specifies the martian address or the destination prefix of a series of martian addresses that are to be allowed or disallowed.

  1. Click the New button or select a martian address and click the Edit button.
  2. Enter the address.

Comment

Specifies the comment for the martian address.
  1. Click the New button or select a martian address and click the Edit button.
  2. Enter the comment for the martian address.

Allow

Enables you to explicitly allow a subset of a range of addresses that are to be disallowed.

  1. Click the New button or select a martian address and click the Edit button.
  2. Select the check box to allow the disallowed address. Selecting the allow option deletes a particular martian address from the range of martian addresses.
  3. Clear the check box to disallow the addresses and mark them as a martian address.

Exact

Specifies match criteria for the route’s mask length with the martian address. The criteria are:

  • Exact
  • Longer
  • Orlonger
  • Upto
  • Through
  • Prefix Length Range
  1. Click the New button or select a martian address and click the Edit button.
  2. Expand the Martian tree and select Exact.
  3. Enter the match criteria.

Published: 2009-08-23