3Com MSR 30, MSR 50 manual Firewall fragments-inspect, Example # Enable fragments inspection

1994 CHAPTER 130: PACKET FILTER FIREWALL CONFIGURATION COMMANDS

name acl-name: Specifies the Layer 2 ACL name, a case-insensitive string of 1 to 32 characters that must start with an English letter a to z or A to Z. To avoid confusion, the word “all” cannot be used as the ACL name.

inbound: Filters packets in the inbound direction.

outbound: Filters packets in the outbound direction.

Description Use the firewall ethernet-frame-filtercommand to configure Ethernet frame filtering.

Use the undo firewall ethernet-frame-filter command to remove the

Ethernet frame filtering.

Ethernet frame filtering is not performed by default.

Example # Configure Ethernet frame filtering rules on the inbound direction of interface Ethernet 1/0.

<Sysname> system-view [Sysname] bridge enable

[Sysname] bridge 1 enable

[Sysname] interface ethernet 1/0 [Sysname-Ethernet1/0] bridge-set 1

[Sysname-Etherhet1/0] firewall ethernet-frame-filter 4001 inbound

firewall fragments-inspect

Syntax firewall fragments-inspect

undo firewall fragments-inspect

View System view

Parameter None

Description Use the firewall fragments-inspectcommand to enable fragments inspection.

Use the undo firewall fragments-inspectcommand to disable fragments inspection.

Be default, fragments inspection is disabled.

Related command: firewall fragments-inspect, and firewall packet-filter.

Example # Enable fragments inspection.

<Sysname> system-view

[Sysname] firewall fragments-inspect