Tcp Syn-Cookie Enable - H3C MSR 20-20 Command Reference Manual

802 C 60: IP P
HAPTER ERFORMANCE
Description
Related command:
Example

tcp syn-cookie enable

Syntax
View
Parameter
Description
C C
ONFIGURATION
syn-received: SYN_RECEIVED state of a TCP connection.
connected-number number: Maximum number of TCP connections in a certain
state. The argument number is in the range of 0 to 500.
Use the
tcp state
connections in a state. When this number is exceeded, the aging of TCP
connections in this state will be accelerated.
Use the undo tcp state
By default, the maximum number of TCP connections in each state is 5.
Note the following points:
You need to enable the protection against Naptha attack before executing this
■
command. Otherwise, an error will be prompted.
You can respectively configure the maximum number of TCP connections in
■
each state.
If the maximum number of TCP connections in a state is 0, the aging of TCP
■
connections in this state will not be accelerated.
tcp anti-naptha enable.
n
This support for this command varies with devices.
# Set the maximum number of TCP connections in the ESTABLISHED state to 100.
<Sysname> system-view
[Sysname] tcp anti-naptha enable
[Sysname] tcp state established connection-number 100
tcp syn-cookie enable
undo tcp syn-cookie enable
System view
None
Use the tcp syn-cookie enable
protect the device against SYN Flood attacks.
Use the
undo tcp syn-cookie enable
feature.
By default, the SYN Cookie feature is disabled.
OMMANDS
command to configure the maximum number of TCP
command to restore the default.
command to enable the SYN Cookie feature to
command to disable the SYN Cookie