R211x-HP Flexfabric 11900 Layer 3 - IP Services Command Reference

158
bucketsize: Specifies the maximum number of tokens allowed in the bucket. The value range is 1 to 200,
and the default is 10.
Usage guidelines
To avoid sending excessive ICMP error messages within a short period that might cause network
congestion, you can use the command to limit the rate at which ICMP error messages are sent. A token
bucket algorithm is used with one token representing one ICMP error message. Tokens are placed in the
bucket at a specific interval until the maximum number of tokens that the bucket can hold is reached.
Tokens are removed from the bucket when ICMP error messages are sent. When the bucket is empty,
ICMP error messages are not sent until a new token is placed in the bucket.
Examples
# Configure an interval of 200 milliseconds and bucket size of 40 tokens for ICMP error messages.
<Sysname> system-view
[Sysname] ip icmp error-interval 200 40
ip icmp fragment discarding
Use ip icmp fragment discarding to disable forwarding of ICMP fragments.
Use undo ip icmp fragment discarding to enable forwarding of ICMP fragments.
Syntax
ip icmp fragment discarding
undo ip icmp fragment discarding
Default
Forwarding of ICMP fragments is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Disable forwarding of ICMP fragments can prevent ICMP fragment attacks.
Examples
# Disable forwarding of ICMP fragments.
<Sysname> system-view
[Sysname] ip icmp fragment discarding
ip icmp source
Use ip icmp source to enable specifying the source address for outgoing ICMP packets.
Use undo ip icmp source to restore the default.
Syntax
ip icmp source [ vpn-instance vpn-instance-name ] ip-address