IPv6 Diagnostic and Troubleshooting
ICMP
Controlling the frequency of ICMPv6 error messages can help to prevent DoS (Denial- of- Service) attacks. With IPv6 enabled on the switch, you can control the allowable frequency of these messages with ICMPv6
Syntax:. ipv6 icmp
This command is executed from the global configuration level, and uses a “token bucket” method for limiting the rate of ICMP error and informational messages. Using this method, each ICMP message uses one token, and a message can be sent only if there is a token available. In the default configuration, a new token can be added every 100 milliseconds, and a maximum of 10 tokens are allowed in the token bucket. If the token bucket is full, a new token cannot be added until an existing token is used to enable sending an ICMP message. You can increase or decrease both the the frequency with which used tokens can be replaced and (optionally) the number of tokens allowed to exist.
Default: 100; Range: 0 - 2147483647.
You can change the rate at which ICMP messages are allowed by changing the
The no ipv6 icmp
Use the show run command to view the current ICMP error interval settings.
For example, the following command limits ICMP error and informational messages to no more than 20 every 1 second:
ProCurve(config)# ipv6 icmp