R3721-F3210-F3171-HP High-End Firewalls Network Management Command Reference-6PW101

656

Parameters

None

Description

Use ipv6 hoplimit-expires enable to enable the sending of ICMPv6 Time Exceeded packets.

Use undo ipv6 hoplimit-expires to disable the sending of ICMPv6 Time Exceeded packets.

By default, the sending of ICMPv6 Time Exceeded packets is enabled.

After you disable the sending of ICMPv6 Time Exceeded packets, the firewall will still send Fragment

Reassembly Time Exceeded packets.

Examples

# Disable the sending of ICMPv6 Time Exceeded packets.

<Sysname> system-view

[Sysname] undo ipv6 hoplimit-expires

ipv6 icmp-error

Syntax

ipv6 icmp-error { bucket bucket-size | ratelimit interval } *

undo ipv6 icmp-error

View

System view

Default level

2: System level

Parameters

bucket bucket-size: Number of tokens in the token bucket, in the range of 1 to 200.

ratelimit interval: Update period of the token bucket in milliseconds, in the range of 0 to 2,147,483,647.

The update period "0" indicates that the number of ICMPv6 error packets sent is not restricted.

Description

Use ipv6 icmp-error to configure the size and update period of the token bucket.

Use undo ipv6 icmp-error to restore the defaults.

By default, the size is 10 and the update period is 100 milliseconds. At most 10 ICMPv6 error packets

can be sent within 100 milliseconds.

Examples

# Set the capacity of the token bucket to 50 and the update period to 100 milliseconds.