152
Configuring the rate limit for ICMPv6 error messages
To avoid sending excessive ICMPv6 error messages within a short period that might cause network
congestion, you can limit the rate at which ICMPv6 error messages are sent. A token bucket algorithm is
used with one token representing one ICMPv6 error message. Tokens are placed in the bucket at a
specific interval until the maximum number of tokens that the bucket can hold is reached. Tokens are
removed from the bucket when ICMPv6 error messages are sent. When the bucket is empty, ICMPv6
error messages are not sent until a new token is placed in the bucket.
To configure the rate limit for ICMPv6 error messages:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Set the interval and bucket size
for ICMPv6 error messages
ipv6 icmpv6 error-interval
milliseconds [ bucketsize ]
By default, the bucket allows a
maximum of 10 tokens, and
tokens are placed in the bucket
at the interval of 100
milliseconds.
To disable the ICMPv6 rate limit,
set the interval to 0 milliseconds.
Enabling replying to multicast echo requests
The device does not respond to multicast echo requests by default. In some scenarios, however, you must
enable the device to answer multicast echo requests so the source host can obtain needed information.
To enable the device to answer multicast echo requests:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable replying to multicast
echo requests.
ipv6 icmpv6 multicast-echo-reply
enable
By default, this function is not
enabled.
Enabling sending ICMPv6 destination unreachable messages
The device sends ICMPv6 destination unreachable messages as follows:
• If a packet does not match any route, the device sends a No Route to Destination ICMPv6 error
message to the source.
• If the device fails to forward the packet because of administrative prohibition (such as a firewall filter
or an ACL), the device sends the source a Destination Network Administratively Prohibited ICMPv6
error message.
• If the device fails to deliver the packet because the destination is beyond the scope of the source
IPv6 address (for example, the source IPv6 address is a link-local address whereas the destination
IPv6 address is a global unicast address), the device sends the source a Beyond Scope of Source
Address ICMPv6 error message.
• If the device fails to resolve the link layer address for the destination IPv6 address, the device sends
the source an Address Unreachable ICMPv6 error message.
To Next Page
Loading...
