601
Views
System
Predefined user roles
network-admin
mdc-admin
Parameter
interval
: Specifies the check interval in the range of 1 to 60 seconds.
Usage guidelines
This command takes effect after you enable Naptha attack prevention.
After you enable Naptha attack prevention, the device checks the number of TCP connections in
each state at intervals. If the number of TCP connections in a state exceeds the limit, the device will
accelerate the aging of the TCP connections in that state.
Examples
# Set the interval to 40 seconds for checking the number of TCP connections in each state.
<Sysname> system-view
[Sysname] tcp check-state interval 40
Related commands
tcp anti-naptha enable
tcp state
tcp state
Use
tcp state
to set the maximum number of TCP connections in a state.
Use
undo tcp state
to restore the default.
Syntax
tcp state
{
closing
|
established
|
fin-wait-1
|
fin-wait-2
|
last-ack
}
connection-limit number
undo tcp state
{
closing
|
established
|
fin-wait-1
|
fin-wait-2
|
last-ack
}
connection-limit
Default
The maximum number of TCP connections in each state (CLOSING, ESTABLISHED, FIN_WAIT_1,
FIN_WAIT_2, and LAST_ACK) is 50.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
closing
: Specifies the CLOSING state.
established
: Specifies the ESTABLISHED state.
fin-wait-1
: Specifies the FIN_WAIT_1 state.
fin-wait-2
: Specifies the FIN_WAIT_2 state.
last-ack
: Specifies the LAST_ACK state.
