25-85
Cisco Prime Network 4.0 User Guide
OL-29343-01
Chapter 25 Monitoring Mobile Technologies LTE Networks
Figure 25-13 Crypto Template Details
Table 25-52 displays the Crypto template details.
Table 25-52 Crypto Template Details
Field Description
Template Name The unique name of the template.
Control Don’t Fragment The Don’t Fragment (DF) bit in the IPSec tunnel data packet, which is
encapsulated in the IPSec headers at both ends. The values for this field are:
• clear-bit—Clear DF Bit
• copy-bit—Copy DF bit from inner header
• set-bit—Set DF Bit
This field defaults to copy-bit.
Cookie Challenge-Detect
DOS Attack The cookie challenge parameters for the crypto template, which is used to
prevent malicious Denial of Service (DOS) attacks against the server.
Note This feature prevents DOS attacks by sending a challenge cookie. If
the response from the sender does not incorporate the expected
cookie data, the packets are dropped.