Configuration Procedure; Displaying And Maintaining Ip Performance Optimization - HP A5120 EI Series Configuration Manual

If a switch receives a lot of malicious packets that cause it to send ICMP error packets, its

performance is reduced.
As the redirection function increases the routing table size of a host, the host's performance is

reduced if its routing table becomes very large.
If an attacker sends abnormal traffic that causes the switch to generate ICMP destination

unreachable packets, end users may be affected.
To prevent such problems, disable the switch from sending ICMP error packets.

Configuration procedure

Follow these steps to enable sending of ICMP error packets:
To do...
Enter system view
Enable sending of ICMP redirect packets
Enable sending of ICMP timeout packets
Enable sending of ICMP destination
unreachable packets
NOTE:
The switch stops sending ―TTL timeout‖ ICMP error packets after the sending of ICMP timeout packets is
disabled. However, ―reassembly timeout‖ error packets will be sent normally.
Displaying and maintaining IP performance
optimization
To do...
Display TCP connection statistics
Display UDP statistics
Display statistics of IP packets
Display ICMP statistics
Display socket information
Use the command...
system-view
ip redirects enable
ip ttl-expires enable
ip unreachables enable
Use the command...
display tcp statistics [ | { begin | exclude |
include } regular-expression ]
display udp statistics [ | { begin | exclude |
include } regular-expression ]
display ip statistics [ slot slot-number ] [ | {
begin | exclude | include } regular-
expression ]
display icmp statistics [ slot slot-number ] [ | {
begin | exclude | include } regular-
expression ] regular-expression ]
display ip socket [ socktype sock-type ] [ task-
id socket-id ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
102
Remarks
—
Required
Disabled by default.
Required
Disabled by default.
Required
Disabled by default.
Remarks
Available in any view
Available in any view
Available in any view
Available in any view
Available in any view