Configuring Icmpv6 Packet Sending; Configuring The Maximum Icmpv6 Error Packets Sent In An Interval; Enabling Replying To Multicast Echo Requests - HP 3600 v2 Series Configuration Manual

Step
1. Enter system view.
2. Set the synwait timer.
3. Set the finwait timer.
4. Set the size of the IPv6 TCP
sending/receiving buffer.

Configuring ICMPv6 packet sending

Configuring the maximum ICMPv6 error packets sent in an
interval
If too many ICMPv6 error packets are sent within a short time in a network, network congestion may
occur. To avoid network congestion, you can control the maximum number of ICMPv6 error packets sent
within a specific time by adopting the token bucket algorithm.
You can set the capacity of a token bucket to determine the number of tokens in the bucket. In addition,
you can set the update interval of the token bucket, the interval for restoring the configured capacity. One
token allows one ICMPv6 error packet to be sent. Each time an ICMPv6 error packet is sent, the number
of tokens in a token bucket decreases by one. If the number of ICMPv6 error packets successively sent
exceeds the capacity of the token bucket, the additional ICMPv6 error packets cannot be sent out until
the capacity of the token bucket is restored.
To configure the capacity and update interval of the token bucket:
Step
1. Enter system view.
2. Configure the capacity
and update interval of
the token bucket.

Enabling replying to multicast echo requests

If hosts are configured to answer multicast echo requests, an attacker can use this mechanism to attack
a host. For example, if Host A (an attacker) sends an echo request with the source being Host B to a
multicast address, all hosts in the multicast group will send echo replies to Host B. To prevent such an
attack, disable a device from answering multicast echo requests by default. In some application
scenarios, however, you must enable the device to answer multicast echo requests.
Command
system-view
tcp ipv6 timer syn-timeout
wait-time
tcp ipv6 timer fin-timeout wait-time
tcp ipv6 window size
Command
system-view
ipv6 icmp-error { bucket
bucket-size | ratelimit
interval } *
136
Remarks
N/A
Optional.
75 seconds by default.
Optional.
675 seconds by default.
Optional.
8 KB by default.
Remarks
N/A
Optional.
By default, the capacity of a token bucket is 10
and the update interval is 100 milliseconds. A
maximum of 10 ICMPv6 error packets can be
sent within 100 milliseconds.
The update interval "0" indicates that the
number of ICMPv6 error packets sent is not
restricted.