1995

firewall fragments-inspect [ high low ]

Syntax

firewall fragments-inspect [ high low ] { number default }

 

undo firewall fragments-inspect [ high low ]

View

System view

Parameter

high number: Specifies the high watermark value of the number of fragment

 

status records.

 

low number: Specifies the low watermark value of the number of fragment status

 

records.

 

default: Specifies the default number of fragment status records.

Description

Use the firewall fragments-inspect[ high low ] command to configure the

 

high and low watermark values for fragments inspection.

 

Use the undo firewall fragments-inspect[ high low ] command to restore

 

the default high and low watermark values.

 

By default, the high watermark value is 2,000 and low watermark value is 1500.

 

The low watermark value must be smaller than or equal to the high watermark

 

value.

Related command:

firewall fragments-inspectand firewall packet-filter.

Example

# Set the high watermark for fragment inspection to 3,000 and low watermark to

 

the default value.

 

<Sysname> system-view

 

[Sysname] firewall fragments-inspect high 3000

 

[Sysname] firewall fragments-inspect low default

firewall ipv6 fragments-inspect

Syntax firewall ipv6 fragments-inspect

undo firewall ipv6 fragments-inspect

View System view

Parameter None

Description Use the firewall ipv6 fragments-inspectcommand to enable IPv6 fragments inspection.

Page 1995
Image 1995
3Com MSR 50 Firewall fragments-inspect high low, Firewall ipv6 fragments-inspect, Undo firewall fragments-inspect high low