Cisco Cisco Packet Data Gateway (PDG) Guia De Resolução De Problemas
Firewall-and-NAT Policy Configuration Mode Commands
firewall icmp-fsm ▀
Cisco ASR 5000 Series Command Line Interface Reference ▄
OL-22948-01
firewall icmp-fsm
This command enables/disables Stateful Firewall‘s ICMP Finite State Machine (FSM).
Product
FW
Privilege
Security Administrator, Administrator
Syntax
Configures the default setting.
Default: Enabled. Same as
Default: Enabled. Same as
.
Disables Stateful Firewall ICMP FSM checks.
Usage
Use this command to enable/disable Stateful Firewall ICMP FSM checks. When Stateful Firewall and ICMP
FSM are enabled, ICMP reply messages for which there is no saved ICMP request message are discarded.
ICMP error messages (i.e., messages containing an embedded message) for which there is no saved flow for
the embedded message are discarded.
FSM are enabled, ICMP reply messages for which there is no saved ICMP request message are discarded.
ICMP error messages (i.e., messages containing an embedded message) for which there is no saved flow for
the embedded message are discarded.
Example
The following command disables Stateful Firewall‘s ICMP FSM checks:
The following command disables Stateful Firewall‘s ICMP FSM checks: