Cisco Cisco Packet Data Gateway (PDG) Manuale Di Manutenzione

Configuration Management

Generally Available 06-30-2010

3-12

firewall tcp-checksum-error

This command configures Stateful Firewall action on packets with TCP Checksum errors.

CLI (Firewall-and-NAT Policy Configuration Mode)

firewall tcp-checksum-error { drop | permit }

default firewall tcp-checksum-error

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall tcp-fsm

This command enables/disables Stateful Firewall’s TCP Finite State Machine (FSM).

CLI (Firewall-and-NAT Policy Configuration Mode)

firewall tcp-fsm [ first-packet-non-syn { drop | permit | send-reset } ]

{ default | no } firewall tcp-fsm

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall tcp-options-error

This command configures Stateful Firewall action on packets with TCP Option errors.

CLI (Firewall-and-NAT Policy Configuration Mode)

firewall tcp-options-error { drop | permit }

default firewall tcp-options-error

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall tcp-syn-with-ecn-cwr

This command configures Stateful Firewall action on TCP SYN packets with either ECN or
CWR flag set.

CLI (Firewall-and-NAT Policy Configuration Mode)

firewall tcp-syn-with-ecn-cwr { drop | permit }

default firewall tcp-syn-with-ecn-cwr

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.