Tcp Timer Check-State - H3C S5120-SI Series Command Reference Manual

Parameters
None
Description
Use the tcp syn-cookie enable command to enable the SYN Cookie feature to protect the device
against SYN Flood attacks.
Use the undo tcp syn-cookie enable command to disable the SYN Cookie feature.
By default, the SYN Cookie feature is disabled.
Examples
# Enable the SYN Cookie feature.
<Sysname> system-view
[Sysname] tcp syn-cookie enable

tcp timer check-state

Syntax
tcp timer check-state time-value
undo tcp timer check-state
View
System view
Default Level
2: System level
Parameters
time-value: TCP connection state check interval in seconds, in the range of 1 to 60.
Description
Use the tcp timer check-state command to configure the TCP connection state check interval.
Use the undo tcp timer check-state command to restore the default.
By default, the TCP connection state check interval is 30 seconds.
The device periodically checks the number of TCP connections in each state. If it detects that the
number of TCP connections in a state exceeds the maximum number, it will accelerate the aging of TCP
connections in such a state.
Note that you need to enable the protection against Naptha attack before executing this command.
Otherwise, an error will be prompted.
Related commands: tcp anti-naptha enable.
Example
# Set the TCP connection state check interval to 40 seconds.
<Sysname> system-view
[Sysname] tcp anti-naptha enable
1-20