Configuring TCP Properties
Context
When a TCP connection is set up between switch and other devices, TCP properties such as TCP connection for BGP need to be configured.
The following TCP properties can be configured on the switch:
SYN-Wait timer: When SYN packets are sent, the SYN-Wait timer is started. If no response packet is received after the SYN-Wait timer expires, the TCP connection is closed.
FIN-Wait timer: When the TCP connection status changes from FIN_WAIT_1 to FIN_WAIT_2, the FIN-Wait timer is started. If no response packet is received after the FIN-Wait timer expires, the TCP connection is closed.
Receive/send buffer size of connection-oriented socket.
Minimum Maximum Segment Size (MSS) value: Setting a minimum MSS value for a TCP connection defines the smallest TCP packet size, preventing DoS attacks caused by packets with small MSS values.
Maximum MSS value: Setting a maximum MSS value for a TCP connection defines the largest TCP packet size, allowing TCP packets to be successfully forwarded by intermediate devices when no MTU is available.
Procedure
- Run system-view
The system view is displayed.
- Run tcp timer syn-timeout interval
The SYN-Wait timer of TCP connections is configured.
By default, the value of the TCP SYN-Wait timer is 75s.
- Run tcp timer fin-timeout interval
The FIN-WAIT timer of TCP connections is configured.
By default, the value of the TCP FIN-Wait timer is 675s.
- Run tcp window window-size
The size of the receive or send buffer of a connection-oriented socket is configured.
By default, the size of the receive or send buffer of a connection-oriented socket is 8k bytes.
- Run tcp min-mss mss-value
The minimum MSS value is configured for a TCP connection.
By default, the minimum MSS value for a TCP connection is 216 bytes.
- Run tcp max-mss mss-value
The maximum MSS value is configured for a TCP connection.
By default, the maximum MSS value is not configured for TCP connections.
The maximum MSS value configured using the tcp max-mss command must be greater than the minimum MSS value configured using the tcp min-mss command.