Chapter 18: Stateful Firewall Commands

Efficient Networks® Router family

 

 

 

Command Line Interface Guide

 

 

 

 

 

Table 18-1: Firewall Command Listing (Cont.)

 

 

 

 

 

 

Command

 

Function

 

 

 

 

 

 

 

 

 

 

firewall seticmpflood-

Sets the threshold value for the number of ICMP

 

 

threshold

packets per second, which when exceeded, will

 

 

 

cause the firewall to block any subsequent ICMP

 

 

 

packets until the ICMP traffic drops below the

 

 

 

threshold value.

 

 

 

 

 

 

 

firewall setsynflood-

Sets the threshold value for the number of SYN

 

 

threshold

packets per second, which when exceeded, will

 

 

 

cause the firewall to block any subsequent SYN

 

 

 

packets until the SYN traffic drops below the

 

 

 

threshold value.

 

 

 

 

 

 

 

firewall setudpflood-

Sets the threshold value for the number of UDP

 

 

threshold

packets per second, which when exceeded, will

 

 

 

cause the firewall to block any subsequent UDP

 

 

 

packets until the UDP traffic drops below the

 

 

 

threshold value.

 

 

 

 

 

 

 

firewall viewdroppkts

Displays a listing of up to 200 of the most recent

 

 

 

dropped packets.

 

 

 

 

 

 

 

firewall watch

Enables and disables the console watch for firewall

 

 

 

messages.

 

 

 

 

 

 

 

firewall ?

Lists the supported firewall keywords. To see the syntax for a command, enter the command followed by a ?.

Mgmt Class

Security (R)

Input Format

firewall ?

Parameters

None

Response

A listing of all the supported firewall commands and keywords with a brief description of their function.

Page 18-2

Efficient Networks®

Page 468
Image 468
Efficient Networks 107-0001-000 manual Firewall ?, Sets the threshold value for the number of Icmp