R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

111
Step Command Remarks
2. Configure TCP timers.
• Configure the TCP synwait timer:
tcp timer syn-timeout time-value
• Configure the TCP finwait timer:
tcp timer fin-timeout time-value
Optional.
By default:
• The TCP synwait timer is 75
seconds.
• The TCP finwait timer is 675
seconds.
Configuring ICMP to send error packets
Sending error packets is a major function of ICMP. Error packets are usually sent by the network or
transport layer protocols to notify the source device of network failures or errors.
Advantages of sending ICMP error packets
ICMP error packets include redirect, timeout, and destination unreachable packets.
• ICMP redirect packets
A host might have only a default route to the default gateway in its routing table after startup. If the
following conditions are met, the default gateway sends ICMP redirect packets to the source host,
telling it to reselect a correct next hop to send the subsequent packets:
{ The receiving and forwarding interfaces are the same.
{ The selected route has not been created or modified by an ICMP redirect packet.
{ The selected route is not the default route of the device.
{ There is no source route option in the packet.
The ICMP redirect packets function simplifies host administration and enables a host to gradually
optimize the routing table.
• ICMP timeout packets
If the device receives an IP packet with a timeout error, it drops the packet and sends an ICMP
timeout packet to the source.
The device sends an ICMP timeout packet under the following conditions:
{ If the device finds that the destination of a packet is not itself and the TTL field of the packet is
1, it sends a "TTL timeout" ICMP error message.
{ When the device receives the first fragment of an IP datagram whose destination is the device
itself, it starts a timer. If the timer times out before all the fragments of the datagram are received,
the device sends a "reassembly timeout" ICMP error packet.
• ICMP destination unreachable packets
If the device receives an IP packet with the destination unreachable, it drops the packet and sends
an ICMP destination unreachable error packet to the source.
Conditions for sending an ICMP destination unreachable packet:
{ If neither a route nor the default route for forwarding a packet is available, the device sends a
"network unreachable" ICMP error packet.