Cisco Cisco Packet Data Gateway (PDG) Fehlerbehebungsanleitung
PDSN Service Configuration Mode Commands
ip source-violation ▀
Cisco ASR 5000 Series Command Line Interface Reference ▄
OL-22947-02
ip source-violation
Sets the parameters for IP source validation. Source validation is useful if packet spoofing is suspected or for verifying
packet routing and labeling within the network.
packet routing and labeling within the network.
Source validation requires the source address of received packets to match the IP address assigned to the subscriber
(either statically or dynamically) during the session.
(either statically or dynamically) during the session.
Product
PDSN, PDIF
Privilege
Security Administrator, Administrator
Syntax
Enables/Disables
Configure default settings related to
.
Default: disabled
Configures the service to reset the reneg-limit and drop-limit counters after receipt of a properly addressed
packet.
Configures the service to reset the reneg-limit and drop-limit counters after receipt of a properly addressed
packet.
Default: 10
Sets the number of allowed source violations within a detection period before forcing a call disconnect. If
Sets the number of allowed source violations within a detection period before forcing a call disconnect. If
is not specified, the value is set to the default.
can be any integer value from 1 to 1000000.
can be any integer value from 1 to 1000000.
Default: 120
The length of time, in seconds, for a source violation detection period to last. drop-limit and reneg-limit
counters are decremented each time this value is reached.
The counters are decremented in this manner: reneg-limit counter is reduced by one (1) each time the period
value is reached until the counter is zero (0); drop-limit counter is halved each time the period value is
reached until the counter is zero (0). If
The length of time, in seconds, for a source violation detection period to last. drop-limit and reneg-limit
counters are decremented each time this value is reached.
The counters are decremented in this manner: reneg-limit counter is reduced by one (1) each time the period
value is reached until the counter is zero (0); drop-limit counter is halved each time the period value is
reached until the counter is zero (0). If
is not specified, the value is set to the default.
can be any integer value from 1 to1000000.