212
establishes a TCP connection and enters ESTABLISHED state only when it receives an ACK packet
from the client.
To enable TCP SYN Cookie:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enable TCP SYN Cookie.
tcp syn-cookie enable
The default setting is disabled.
Setting the TCP buffer size
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Set the size of TCP receive/send
buffer.
tcp window
window-size
The default buffer size is 64 KB.
Setting TCP timers
You can set the following TCP timers:
• SYN wait timer—TCP starts the SYN wait timer after sending a SYN packet. Within the SYN
wait timer if no response is received or the upper limit on TCP connection tries is reached, TCP
fails to establish the connection.
• FIN wait timer—TCP starts the FIN wait timer when TCP changes the connection state to
FIN_WAIT_2. If no FIN packet is received within the timer interval, TCP terminates the
connection. If a FIN packet is received, TCP changes the connection state to TIME_WAIT. If a
non-FIN packet is received, TCP restarts the timer, and tears down the connection when the
timer expires.
To set TCP timers:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Set TCP timers.
• Set the TCP SYN wait timer:
tcp timer syn-timeout time-value
• Set the TCP FIN wait timer:
tcp timer fin-timeout time-value
By default:
• The TCP SYN wait timer is 75
seconds.
• The TCP FIN wait timer is
675 seconds.
Enabling sending ICMP error messages
Perform this task to enable sending ICMP error messages, including redirect, time exceeded, and
destination unreachable messages.
• ICMP redirect messages
A host that has only one default route sends all packets to the default gateway. The default
gateway sends an ICMP redirect message to inform the host of a correct next hop by following
these rules:
{ The receiving and sending interfaces are the same.
To Next Page
Loading...
