Cisco Cisco Packet Data Gateway (PDG) Manual De Manutenção

Generally Available 06-30-2010

Modified Configuration Commands

3-115

Firewall Commands - Modified in Release 8.0

This section provides information on commands modified for Release 8.0.

firewall policy

This command enables/disables Stateful Firewall support for the subscriber.

CLI (APN Configuration Mode)

firewall policy firewall-required

[ default | no ] firewall policy

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

firewall policy

This command enables/disables Stateful Firewall support for the APN.

CLI (Subscriber Configuration Mode)

firewall policy firewall-required

[ default | no ] firewall policy

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.

Firewall Commands - Modified in Release 8.1

MPORTANT

The commands documented in this section have been modified in Release 8.1.

firewall dos-protection

This command configures firewall protection from Denial-of-Service (DoS) attacks. In 8.0
this command was available in the Active Charging Service Configuration mode. In 8.1 it
was moved to the Rulebase Configuration mode. Also, in 8.1, the

port-scan

option was

added to this command.

CLI (Rulebase Configuration Mode)

[ no ] firewall dos-protection { all | flooding { icmp | tcp-syn | udp } |

ftp-bounce | ip-unaligned-timestamp | mime-flood | port-scan |

seq-number-out-of-range | seq-number-prediction | source-router | teardrop

| winnuke }

default firewall dos-protection

Web Element Manager Path

This functionality is not supported at this time on the Web Element Manager.