Table of Contents
Advertisement
Enabling fast reply for keepalive packets
This feature allows the hardware to automatically identify and reply to incoming keepalive requests,
which can prevent DDoS attacks.
This feature is only supported by CSPEX cards (except CSPEX-1204).
To enable fast reply for keepalive packets:
Step
1.
Enter system view.
2.
Enable fast reply for
keepalive packets. (In
standalone mode.)
3.
Enable fast reply for
keepalive packets. (In IRF
mode.)
Configuring PPP negotiation
PPP negotiation includes the following parameters:
•
Negotiation timeout time.
•
IP address negotiation.
•
IP segment match.
•
DNS server IP address negotiation.
•
ACCM negotiation.
•
ACFC negotiation.
•
PFC negotiation.
Configuring the PPP negotiation timeout time
The device starts the PPP negotiation timeout timer after sending a packet. If no response is
received before the timer expires, the device sends the packet again.
If two ends of a PPP link vary greatly in the LCP negotiation packet processing rate, configure the
LCP negotiation delay timer on the end with a higher processing rate. The LCP negotiation delay
timer prevents frequent LCP negotiation packet retransmission. After the physical layer comes up,
PPP starts LCP negotiation when the delay timer expires. If PPP receives LCP negotiation packets
before the delay timer expires, it starts LCP negotiation immediately.
To configure the PPP negotiation timeout time:
Step
1.
Enter system view.
2.
Enter interface view.
3.
Configure the negotiation
timeout time.
Command
system-view
ppp keepalive fast-reply enable
slot slot-number
ppp keepalive fast-reply enable
chassis chassis-number slot
slot-number
Command
system-view
interface interface-type
interface-number
ppp timer negotiate seconds
239
Remarks
N/A
By default, fast reply is enabled for
keepalive packets.
By default, fast reply is enabled for
keepalive packets.
Remarks
N/A
N/A
The default setting is 3 seconds.
Advertisement
Table of Contents
Troubleshooting
