Configuring Icmpv6 Packet Sending; Configuring The Maximum Icmpv6 Error Packets Sent In An Interval; Enabling Replying To Multicast Echo Requests - HP 10500 Series Configuration Manual

Step
1. Enter system view.
2. Set the synwait timer.
3. Set the finwait timer.
4. Set the size of the IPv6 TCP
sending/receiving buffer.

Configuring ICMPv6 packet sending

This section provides information on configuring ICMPv6 packet sending.
Configuring the maximum ICMPv6 error packets sent in an
interval
If too many ICMPv6 error packets are sent within a short time in a network, network congestion may
occur. To avoid network congestion, you can control the maximum number of ICMPv6 error packets sent
within a specified time by adopting the token bucket algorithm.
You can set the capacity of a token bucket to determine the number of tokens in the bucket. In addition,
you can set the update interval of the token bucket, that is, the interval for restoring the configured
capacity.
One token allows one ICMPv6 error packet to be sent.
•
Each time an ICMPv6 error packet is sent, the number of tokens in a token bucket decreases by one.
•
If the number of ICMPv6 error packets successively sent exceeds the capacity of the token bucket, the
additional ICMPv6 error packets cannot be sent out until the capacity of the token bucket is restored.
To configure the capacity and update interval of the token bucket:
Step
1. Enter system view.
2. Configure the
capacity and update
interval of the token
bucket.

Enabling replying to multicast echo requests

If hosts are configured to answer multicast echo requests, an attacker may use this mechanism to attack
a host. For example, if Host A (an attacker) sends an echo request with the source being Host B to a
Command
system-view
tcp ipv6 timer syn-timeout wait-time
tcp ipv6 timer fin-timeout wait-time
tcp ipv6 window size
Command
system-view
ipv6 icmp-error { bucket
bucket-size | ratelimit
interval } *
124
Remarks
N/A
Optional.
The default is 75 seconds.
Optional.
The default is 675 seconds.
Optional.
The default is 8 KB.
Remarks
N/A
Optional.
By default, the capacity of a token bucket is 10 and
the update interval is 100 milliseconds. A
maximum of 10 ICMPv6 error packets can be sent
within 100 milliseconds.
The update interval "0" indicates that the number
of ICMPv6 error packets sent is not restricted.