Cisco Cisco ASR 5000
Firewall-and-NAT Policy Configuration Mode Commands
firewall tcp-checksum-error ▀
Command Line Interface Reference, StarOS Release 18 ▄
5125
firewall tcp-checksum-error
This command configures Stateful Firewall action on packets with TCP Checksum error.
Product
PSF
Privilege
Security Administrator, Administrator
Mode
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-fw-and-nat-policy)#
Syntax
firewall tcp-checksum-error { drop | permit }
default firewall tcp-checksum-error
default
Configures the default setting.
Default:
Default:
drop
drop
Drops packets with TCP Checksum errors.
permit
Permits packets with TCP Checksum errors.
Usage
Use this command to configure Stateful Firewall action on packets with TCP Checksum error.
For NAT-only calls, packets with TCP Checksum errors are permitted.
For NAT-only calls, packets with TCP Checksum errors are permitted.
Example
The following command specifies Stateful Firewall to drop packets with TCP Checksum errors:
firewall tcp-checksum-error drop