Configuration Guide Configuring IPv6
Configuring the Sending Rate of Other ICMPv6 Error Messages
Optional.
If a device receives many illegal IPv6 packets and thereby generates many ICMPv6 error messages, run the ipv6
icmp error-interval command to restrict the sending rate of ICMPv6 error messages. (This command does not
affect the sending rate of ICMPv6 Packet Too Big messages.)
Verification
Run the show running-config command to check whether the configuration takes effect.
Related Commands
Configuring the Sending Rate of ICMPv6 Packet Too Big Messages
ipv6 icmp error-interval too-big milliseconds [bucket-size]
milliseconds: Indicates the refresh period of a token bucket, ranging from 0 to 2,147,483,647. The unit is
millisecond. The default value is 100. If the value is 0, the sending rate of ICMPv6 error messages is not
restricted.
bucket-size: Indicates the number of tokens in a token bucket, ranging from 1 to 200. The default value
is 10.
Global configuration mode
To prevent DoS attacks, use the token bucket algorithm to restrict the sending rate of ICMPv6 error
messages.
If the length of an IPv6 packet to be forwarded exceeds the IPv6 MTU of the outbound interface, the
router discards this IPv6 packet and sends back an ICMPv6 Packet Too Big message to the source IPv6
address. This error message is mainly used as part of the IPv6 PMTUD process. If other ICMPv6 error
messages are excessive, ICMPv6 Packet Too Big messages cannot be sent, causing failure of IPv6
PMTUD. Therefore, it is recommended to restrict the sending rate of ICMPv6 Packet Too Big messages
independently of other ICMPv6 error messages.
Since the precision of the timer is 10 milliseconds, it is recommended to set the refresh period of a token
bucket to an integer multiple of 10 milliseconds. If the refresh period of the token bucket is between 0
and 10, the actual refresh period is 10 milliseconds. For example, if the sending rate is set to 1 every 5
milliseconds, two error messages are sent every 10 milliseconds in actual situations. If the refresh period
of the token bucket is not an integer multiple of 10 milliseconds, it is automatically converted to an
integer multiple of 10 milliseconds. For example, if the sending rate is set to 3 every 15 milliseconds, two
tokens are refreshed every 10 milliseconds in actual situations.
Configuring the Sending Rate of Other ICMPv6 Error Messages
ipv6 icmp error-interval milliseconds [bucket-size]
milliseconds: Indicates the refresh period of a token bucket, ranging from 0 to 2,147,483,647. The unit is
millisecond. The default value is 100. If the value is 0, the sending rate of ICMPv6 error messages is not
restricted.
bucket-size: Indicates the number of tokens in a token bucket, ranging from 1 to 200. The default value
is 10.
Global configuration mode