R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

17
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable TCP path MTU
discovery.
tcp path-mtu-discovery [ aging minutes |
no-aging ]
Optional.
Disabled by default.
CAUTION:
A
ll the devices on the TCP path must be enabled to send ICMP error messa
g
es by usin
g
the ip
unreachables enable command.
Configuring the TCP send/receive buffer size
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure the size of TCP
send/receive buffer.
tcp window window-size
Optional.
8 KB by default.
Configuring TCP timers
You can configure the following TCP timers:
• synwait timer—When sending a SYN packet, TCP starts the synwait timer. If no response packet is
received within the synwait timer interval, the TCP connection cannot be created.
• finwait timer—When a TCP connection is changed into FIN_WAIT_2 state, the finwait timer is
started. If no FIN packet is received within the timer interval, the TCP connection is terminated. If a
FIN packet is received, the TCP connection state changes to TIME_WAIT. If a non-FIN packet is
received, the system restarts the timer upon receiving the last non-FIN packet. The connection is
broken after the timer expires.
To configure TCP timers:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure the TCP synwait timer.
tcp timer syn-timeout time-value
Optional.
75 seconds by default.
3. Configure the TCP finwait timer.
tcp timer fin-timeout time-value
Optional.
675 seconds by default.
CAUTION:
The actual length of the finwait timer is determined by the following formula:
A
ctual len
g
th of the finwait timer = (Configured length of the finwait timer – 75) + confi
g
ured len
g
th of the
synwait timer