Cisco Cisco Packet Data Gateway (PDG) Manual De Manutenção

Configuration Management

Generally Available    06-30-2010 

3-34

This command adds and specifies the priority of a firewall rule definition in the rulebase, 
and allows to configure a single or range of ports to be allowed on the server for 
auxiliary/data connections.

firewall priority priority firewall-ruledef ruledef_name { { permit [ 

trigger open-port { aux_port_number | range start_port_number to 

end_port_number } direction { both | reverse | same } ] } | { deny [ 

charging-action charging_action ] } }

no firewall priority priority

This functionality is not supported at this time on the Web Element Manager.

This command creates a Firewall Ruledef, and enters the ACS Firewall Ruledef 
Configuration Mode.

[ no ] firewall ruledef ruledef_name [ -noconfirm ]

This functionality is not supported at this time on the Web Element Manager.

This command enables and configures the TCP intercept parameters to prevent TCP SYN 
flooding attacks by intercepting and validating TCP connection requests for DoS protection 
mechanism configured with the 

command.

firewall tcp-syn-flood-intercept { max-attempts max_attempts | mode { none 

retransmit_timeout | watch-timeout intercept_watch_timeout }

This functionality is not supported at this time on the Web Element Manager.