R3303-HP HSR6800 Routers Security Command Reference

473
Syntax
tcp syn-cookie enable
undo tcp syn-cookie enable
Default
The SYN Cookie feature is enabled.
Views
System view
Default command level
2: System level
Examples
# Enable the SYN Cookie feature.
<Sysname> system-view
[Sysname] tcp syn-cookie enable
tcp timer check-state
Use tcp timer check-state to configure the TCP connection state check interval.
Use undo tcp timer check-state to restore the default.
Syntax
tcp timer check-state time-value
undo tcp timer check-state
Default
The TCP connection state check interval is 30 seconds.
Views
System view
Default command level
2: System level
Parameters
time-value: Specifies the TCP connection state check interval in seconds, in the range of 1 to 60.
Usage guidelines
The device periodically checks the number of TCP connections in each state. If it detects that the number
of TCP connections in a state exceeds the maximum number, it accelerates the aging of TCP connections
in such a state.
You must enable the protection against Naptha attack before executing this command. Otherwise, an
error is prompted.
Example
# Set the TCP connection state check interval to 40 seconds.
<Sysname> system-view
[Sysname] tcp anti-naptha enable