ltm global-settings traffic-control¶

ltm global-settings traffic-control(1) BIG-IP TMSH Manual ltm global-settings traffic-control(1)

NAME
traffic-control - Configures the global settings that pertain to traffic control for the BIG-IP(r) and
VIPRION(r) local traffic management systems.

MODULE
ltm global-settings

SYNTAX
Configure the traffic-control component within the ltm global-settings module using the syntax shown in the
following sections.

MODIFY
modify traffic-control
options:
accept-ip-options [disabled | enabled]
accept-ip-source-route [disabled | enabled]
allow-ip-source-route [ disabled | enabled]
continue-matching [ disabled | enabled]
max-icmp-rate [integer value: 0 ~ 2147483647]
max-reject-rate [ integer value: 1 ~ 1000]
max-reject-rate-timeout [ integer value: 0 ~ 300]
min-path-mtu [ integer value: 68 ~ 1500]
path-mtu-discovery [disabled | enabled]
port-find-linear [ integer value: 0 ~ 61439]
port-find-random [ integer value: 0 ~ 1024]
port-find-threshold-warning [disabled | enabled]
port-find-threshold-trigger [integer value: 1 ~ 12]
port-find-threshold-timeout [integer value: 0 ~ 300]
reject-unmatched [ disabled | enabled]

DISPLAY
list traffic-control
list traffic-control [option name]
show running-config traffic-control
show running-config traffic-control [option name]
options:
all-properties
non-default-properties
one-line

DESCRIPTION
You can use the traffic-control component to modify how the system processes local traffic.

EXAMPLES
modify traffic-control accept-ip-options enabled
Specifies that the system accepts IPv4 packets with IP options.

list traffic-control
Displays the local traffic control global settings.

OPTIONS
accept-ip-options
Specifies whether the system accepts IPv4 packets with IP options. The default value is disabled.

accept-ip-source-route
Specifies whether the system accepts IPv4 packets with IP source route options that are destined for
Traffic Management Microkernel (TMM). The default value is disabled.

To enable this option, you must also enable the accept-ip-options option.

allow-ip-source-route
Specifies whether the system allows IPv4 packets with IP source route options enabled to be routed
through Traffic Management Microkernel (TMM). The default value is disabled.

To enable this option, you must also enable the accept-ip-options option.

continue-matching
Specifies whether the system matches against a less-specific virtual server when the more-specific one is
disabled. When continue-matching is disabled, the default value, the system drops connections that
request a disabled virtual server. In this case, the system rejects or drops packets depending on the
value of the reject-unmatched option.

max-icmp-rate
Specifies the maximum rate per second at which the system issues Internet Control Message Protocol (ICMP)
errors. The default value is 100 errors per second. The range is from 0 (zero) to 2147483647 errors per
second. This option is useful for preventing ICMP-message storms.

max-reject-rate
Specifies the maximum rate per second at which the system issues reject packets (TCP RST or ICMP port
unreach). The default value is 250 per second. The range is from 1 to 1000 per second.

max-reject-rate-timeout
Specifies the time in seconds which the system ignores icmp port unreach and tcp rst ratelimits on
becoming active after a failover. The default value is 30 seconds. The range is from 0 to 300 seconds.

min-path-mtu
Specifies the minimum packet size that can traverse the path without suffering fragmentation, also known
as path Maximum Transmission Unit(MTU). The default value is 296. The range is from 68 to 1500.

path-mtu-discovery
Specifies, when enabled, that the system discovers the maximum transmission unit (MTU) that it can send
over a path, without fragmenting TCP packets. The default value is enabled.

port-find-linear
Specifies the maximum of ports to linearly search for outbound connections. The default value is 16. The
range is from 0 to 61439.

port-find-random
Specifies the maximum of ports to randomly search for outbound connections. The default value is 16. The
range is from 0 to 1024.

port-find-threshold-warning
Specifies if the ephemeral port-exhaustion threshold warning is to be monitored. The default is enabled.

port-find-threshold-trigger
Specifies the threshold warning's trigger which is the value of random port attempts when attempting to
find an unused outbound port for a connection. The default is 8. The valid range is 1 - 12.

port-find-threshold-timeout
Specifies the threshold warning's timeout. This is the time in seconds since the last trigger value was
hit and will drop the tuple if not hit. The default is 30 (1/2 minute) with range from 0 - 300.

reject-unmatched
Specifies, when enabled, that the system returns a TCP RESET or ICMP_UNREACH packet if no virtual servers
on the system match the destination address of the incoming packet. When this option is disabled, the
system silently drops the unmatched packet. The default value is enabled.

SEE ALSO
list, ltm node, modify, show, tmsh

COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

BIG-IP 2016-03-14 ltm global-settings traffic-control(1)