Cisco Cisco Packet Data Gateway (PDG) Wartungshandbuch

Configuration Management

Generally Available 06-30-2010

3-116

firewall flooding

This command configures firewall protection from packet flooding attacks. In 8.0 this
command was available in the Active Charging Service Configuration mode. In 8.1 it is
moved to the Rulebase Configuration mode.

CLI (Rulebase Configuration Mode)

firewall flooding { { protocol { icmp | tcp-syn | udp } packet limit packets

} | { sampling-interval interval } }

default firewall flooding { { protocol { icmp | tcp-syn | udp } packet limit

} | { sampling-interval } }

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall icmp-destination-unreachable-message-threshold

This command configures a threshold on the number of ICMP error messages sent by the
subscriber for a particular data flow. In 8.0 this command was available in the Active
Charging Service Configuration mode. In 8.1 it is moved to the Rulebase Configuration
mode.

CLI (Rulebase Configuration Mode)

firewall icmp-destination-unreachable-message-threshold messages

then-block-server

[ default | no ] firewall icmp-destination-unreachable-message -threshold

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall max-ip-packet-size

This command configures the maximum IP packet size allowed over firewall. In 8.0 this
command was available in the Active Charging Service Configuration mode. In 8.1 it is
moved to the Rulebase Configuration mode.

CLI (Rulebase Configuration Mode)

firewall max-ip-packet-size packet_size protocol { icmp | non-icmp }

default firewall max-ip-packet-size protocol { icmp | non-icmp }

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.