Firewall Feature Set Commands
16-118 Configuring Security
Defaults
Denyall
Mode
Globalconfiguration:XSR(config)#
Example
ThefollowingexamplepermitsanyremotehosttorunaPPTPtunneltoaserverontheinternal
network:
XSR(config)#ip firewall network pptp-server 120.21.1.18/32 internal
XSR(config)#ip fire filter allow--gre ANY_EXTERNAL pptp-server 47 protocol-id
XSR(config)#ip firewall filter allow--gre pptp-server ANY_EXTERNAL protocol-id 47

ip firewall icmp timeout

ThiscommanddefinestheobjectwhichhandlesallconfigurationforICMPpacketinspection.
Syntax
ip firewall icmp timeout <seconds>
Syntax of the “no” Form
Thenoformofthiscommandsetsthetimeouttothedefaultvalue:
no ip firewall icmp timeout
Default
Timeout:60seconds
Mode
Globalconfiguration:XSR(config)#
Example
ThefollowingexampleresetstheICMPidletimeoutinterval:
XSR(config)#ip firewall icmp timeout 300

ip firewall java and ip firewall activex

ThiscommanddefinestheobjectthatallowsordeniesHTMLpageswithembeddedJavaor
ActiveXappletsfromparticularorallIPaddresses.Anameforanyfirewallobjectmustusethese
alphanumericcharactersonly:A‐Z(upperorlowercase),0‐9,-(dash),or _(underscore).Also,
allfirewallobjectnamesarecasesensitive.
seconds IdletimeoutforICMPsessions,rangingfrom60to86400seconds.