Cisco Cisco Packet Data Gateway (PDG) Prospecto

 

 

 

Unknown Hop By Hop Options 

Indicates status of protection against IPv6 packets containing unknown hop-by-hop 
options. 

IPv6 Destination Options 

Indicates status of protection against IPv6 packets containing IPv6 destination 
options header. 

Invalid Destination Options 

Indicates status of protection against IPv6 packets containing invalid destination 
options. 

Unknown Destination Options 

Indicates status of protection against IPv6 packets containing unknown destination 
options. 

IPv6 Nested Fragmentation 

Indicates status of protection against IPv6 packets containing IPv6 nested 
fragmentation. 

Max-Packet-Size 

ICMP 

For ICMP protocol, the maximum IP packet size (after IP reassembly) allowed over 
Stateful Firewall. 

Non-ICMP 

For non-ICMP protocol, the maximum IP packet size (after IP reassembly) allowed 
over Stateful Firewall. 

Flooding 

ICMP limit 

The maximum number of ICMP packets allowed during a sampling interval. 

UDP limit 

The maximum number of UDP packets allowed during a sampling interval. 

TCP-SYN limit 

The maximum number of TCP-SYN packets allowed during a sampling interval. 

Sampling Interval 

The flooding sampling interval, in seconds. 

TCP-SYN Flood Intercept 

Mode 

The TCP SYN flood intercept mode. 



 

none 



 

intercept 



 

watch 

Watch-timeout 

The TCP intercept watch timeout, in seconds. 

Mime-Flood Params 

HTTP Header-Limit 

The maximum number of headers allowed in an HTTP packet. 

HTTP Max-Header-Field-Size 

The maximum header field size allowed in an HTTP header, in bytes. 

No Firewall Ruledef Match Action 

Uplink Action 

Action configured for uplink packets with no access ruledef matches. 

Uplink Charging-Action 

Charging action configured for uplink packets with no access ruledef matches. 

Uplink NAT-Realm 

The NAT-realm to be used if none of the firewall ruledefs are matched for the 
uplink traffic.