Carrier Access none manual Security-default, Maximum, Minimum, Typical default

Global Configuration Mode

Global Configuration Commands

security-default

Use the security-defaultcommand to configure the security policy.

Syntax: (config)# security-default {maximumminimumtypical} [block-ip-frag]

Field	Definition
The following security levels are described in detail.
	Requests Originating in the	Requests Originating in the LAN
	WAN
maximum	Blocked: No access to network	Limited: Only commonly-used
	from Internet, except as	services, such as Web-browsing and
	configured in the Local Servers,	e-mail, are permitted. These
	DMZ host and Remote Access	services include Telnet, FTP,
	screens.	HTTP, HTTPS, DNS, IMAP,
		POP3, Ping and SNMP
minimum	Blocked: No access to network	Unrestricted: All services are
	from Internet, except as	permitted, except as configured in
	configured in the local Servers,	the Access Control screen.
	DMZ host and Remote Access
	screens.
typical (default)	Unrestricted: Permits full	Unrestricted: All services are
	access from Internet to network;	permitted, except as configured in
	all connection attempts	the Access Control screen.
	permitted.
block-ip-frag	Block IP Fragments
	Checking this option will protect your network from a common type of
	hacker attack that could make use of fragmented data packets to
	sabotage your network. Note that VPN over IPSec and some UDP-
	based services make legitimate use of IP fragments. You will need to
	allow IP fragments to pass into the home network in order to make use
	of these selected services.

Example: (config)# security-default maximum

Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR

Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.0) CLI 4-57