Cisco Cisco Packet Data Interworking Function (PDIF)
firewall tcp-syn-with-ecn-cwr
This command configures Stateful Firewall action on TCP SYN packets with either ECN or CWR flag set.
Product
PSF
Privileges
Security Administrator, Administrator
Command Modes
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]
host_name
(config-fw-and-nat-policy)#
Syntax Description
firewall tcp-syn-with-ecn-cwr { drop | permit }
default firewall tcp-syn-with-ecn-cwr
default firewall tcp-syn-with-ecn-cwr
default
Configures the default setting.
Default: permit
drop
Drops TCP SYN packets with either ECN or CWR flag set.
permit
Permits TCP SYN packets with either ECN or CWR flag set.
Usage Guidelines
Use this command to configure Stateful Firewall action on receiving a TCP SYN packet with either ECN or
CWR flag set.
CWR flag set.
Examples
The following command configures Stateful Firewall to drop TCP SYN packets with ECN / CWR flag set:
firewall tcp-syn-with-ecn-cwr drop
firewall tcp-syn-with-ecn-cwr drop
Command Line Interface Reference, Modes E - F, StarOS Release 19
1714
Firewall-and-NAT Policy Configuration Mode Commands
firewall tcp-syn-with-ecn-cwr