N/w parameters Tuning

[S.S.]

Hi All,

For auditing purpose, HP has recommended us the following N/w tunable parameters

tcp_syn_rcvd_max
4096
arp_cleanup_interval
60000
ip_forward_src_routed
0
ip_forward_directed_broad
casts
0
ip_respond_to_timestamp
0
ip_respond_to_timestamp_
broadcast
0
ip_respond_to_address_ma
sk_broadcast
0
ip_respond_to_echo_broad
cast
0
ip_forwarding
0
ip_send_redirects
0

when i have checked the /etc/rc.config.d/nddconf file i am able to see the following parameters and those parameters are also commented.

# Example 1: Change the interval for sending the first keepalive probes
# for idle TCP connection to one hour
# TRANSPORT_NAME[0]=tcp
# NDD_NAME[0]=tcp_keepalive_interval
# NDD_VALUE[0]=3600000
#
#
# Example 2: Change the interval for sending keepalive probes to 1 minute
# when TCP is detached. (e.g.FIN_WAIT_2)
# TRANSPORT_NAME[1]=tcp
# NDD_NAME[1]=tcp_keepalive_detached_interval
# NDD_VALUE[1]=60000
#
#
# Example 3: Change the amount of time TCP endpoints persist in TIME_WAIT
# state to 30 seconds.
# TRANSPORT_NAME[2]=tcp
# NDD_NAME[2]=tcp_time_wait_interval
# NDD_VALUE[2]=30000
#
# Example 4: Change the UDP default ttl parameter to 128
# TRANSPORT_NAME[3]=udp
# NDD_NAME[3]=udp_def_ttl
# NDD_VALUE[3]=128
#
# Example 5: Change the amount of time that ARP entries can stay in
# ARP cache to 10 minutes.
#
# TRANSPORT_NAME[4]=arp
# NDD_NAME[4]=arp_cleanup_interval
# NDD_VALUE[4]=600000


May i know how can we set the other parameters into the configuration file. After parameters are added whether we have to stop and start any service?

May i know the impact if we add the above parameters.

My OS version is HP-UX 11.11
OS models: rp8440, rp7440 and rp3440

[Johnson Punniyalingam]

Check . Below Thread and the comments from

>>Bill Hassell<<

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=744441

[Johnson Punniyalingam]

More information on the below thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1264066952720+28353475&threadId=53812

[Johnson Punniyalingam]

>>>when i have checked the /etc/rc.config.d/nddconf file i am able to see the following parameters and those parameters are also commented.<<<

meaning ..you are non-compliance for the auditing issues,raised by HP
hence non of the "nddconf" or network parameter are in USE. becoz they are commented

if you there are in "USE" to need to tune according to the requirement from HP recommendations

[Jupinder Bedi · Accepted solution]

you can change the parameters either by using ndd command or by editing or by editing /etc/rc.config.d/nddconf file and if these parameters are recommended by HP than go a head , it will not harm your system.

[Jupinder Bedi]

here is the example for changing your first parameter

ndd -set /dev/tcp tcp_syn_rcvd_max 4096

Good Luck