Cisco Cisco Packet Data Gateway (PDG)
firewall icmp-checksum-error
This command configures Stateful Firewall action on packets with ICMP/ICMPv6 Checksum errors.
Product
PSF
Privilege
Security Administrator, Administrator
Command Modes
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]
host_name
(config-fw-and-nat-policy)#
Syntax Description
firewall icmp-checksum-error { drop | permit }
default firewall icmp-checksum-error
default firewall icmp-checksum-error
default
Configures the default setting.
Default: drop
drop
Drops packets with ICMP/ICMPv6 Checksum errors.
permit
Permits packets with ICMP/ICMPv6 Checksum errors.
Usage Guidelines
Use this command to configure Stateful Firewall action on packets with ICMP/ICMPv6 Checksum errors.
This command also applies to ICMP/ICMPv6 packets with Inner IP Checksum error.
This command also applies to ICMP/ICMPv6 packets with Inner IP Checksum error.
For NAT-only calls, packets with ICMP/ICMPv6 errors are dropped, and other packets are allowed.
Examples
The following command configures Stateful Firewall to drop packets with ICMP/ICMPv6 Checksum errors:
firewall icmp-checksum-error drop
firewall icmp-checksum-error drop
Command Line Interface Reference, Modes E - F, StarOS Release 19
1689
Firewall-and-NAT Policy Configuration Mode Commands
firewall icmp-checksum-error