Cisco Cisco Packet Data Gateway (PDG)
firewall max-ip-packet-size
This command configures the maximum IPv4/IPv6 packet size (after IP reassembly) allowed over Stateful
Firewall.
Firewall.
In release 8.0, this configuration is available in the ACS Configuration Mode. In release 8.1, for
Rulebase-based Stateful Firewall configuration, this configuration is available in the ACS Rulebase
Configuration Mode. In release 8.3, this configuration is available in the ACS Rulebase Configuration
Mode.
Rulebase-based Stateful Firewall configuration, this configuration is available in the ACS Rulebase
Configuration Mode. In release 8.3, this configuration is available in the ACS Rulebase Configuration
Mode.
Important
Product
PSF
Privilege
Security Administrator, Administrator
Command Modes
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]
host_name
(config-fw-and-nat-policy)#
Syntax Description
firewall max-ip-packet-size packet_size protocol { icmp | non-icmp }
default firewall max-ip-packet-size protocol { icmp | non-icmp }
default firewall max-ip-packet-size protocol { icmp | non-icmp }
default
Configures the default setting.
Default: 65535 bytes (for both ICMP/ICMPv6 and non-ICMP/ICMPv6)
packet_size
Specifies the maximum packet size allowed by firewall. Any IPv6 packet with payload size greater than the
configured value will be dropped.
configured value will be dropped.
packet_size must be an integer from 30000 through 65535.
protocol { icmp | non-icmp }
Specifies the transport protocol:
• icmp: Configuration for ICMP/ICMPv6 protocol.
Command Line Interface Reference, Modes E - F, StarOS Release 19
1696
Firewall-and-NAT Policy Configuration Mode Commands
firewall max-ip-packet-size