Cisco Cisco Packet Data Gateway (PDG) Fehlerbehebungsanleitung
Active Charging Service Configuration Mode Commands
▀ firewall max-ip-packet-size
▄ Cisco ASR 5000 Series Command Line Interface Reference
OL-22948-01
firewall max-ip-packet-size
This command configures the maximum IP packet size allowed over Stateful Firewall.
Important:
In StarOS 8.1 and later, for Rulebase-based Stateful Firewall this command is available in the
Rulebase Configuration Mode, and for Policy-based Stateful Firewall in the Firewall-and-NAT Policy Configuration
Mode. In StarOS 8.3, this command is available in the Rulebase Configuration Mode.
Mode. In StarOS 8.3, this command is available in the Rulebase Configuration Mode.
Product
FW
Privilege
Security Administrator, Administrator
Syntax
Sets the maximum IP packet size configuration to the default value.
Default: 65535 bytes (for both ICMP and non-ICMP)
Default: 65535 bytes (for both ICMP and non-ICMP)
Specifies the maximum packet size.
must be an integer from 30000 through 65535.
Specifies the transport protocol:
: Configuration for ICMP protocol.
: Configuration for protocols other than ICMP.
Usage
Use this command to configure the maximum IP packet size allowed for ICMP and non-ICMP packets to
prevent packet flooding attacks to the host. Packets exceeding the configured size will be dropped for ―Jolt
Attack‖ and ―Ping-Of-Death Attack‖.
prevent packet flooding attacks to the host. Packets exceeding the configured size will be dropped for ―Jolt
Attack‖ and ―Ping-Of-Death Attack‖.
Example
The following command allows a maximum packet size of
The following command allows a maximum packet size of
for ICMP protocol: