Cisco Cisco Packet Data Gateway (PDG)
Firewall-and-NAT Policy Configuration Mode Commands
▀ firewall icmp-checksum-error
▄ Command Line Interface Reference, StarOS Release 18
5112
firewall icmp-checksum-error
This command configures Stateful Firewall action on packets with ICMP/ICMPv6 Checksum errors.
Product
PSF
Privilege
Security Administrator, Administrator
Mode
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-fw-and-nat-policy)#
Syntax
firewall icmp-checksum-error { drop | permit }
default firewall icmp-checksum-error
default
Configures the default setting.
Default:
Default:
drop
drop
Drops packets with ICMP/ICMPv6 Checksum errors.
permit
Permits packets with ICMP/ICMPv6 Checksum errors.
Usage
Use this command to configure Stateful Firewall action on packets with ICMP/ICMPv6 Checksum errors.
This command also applies to ICMP/ICMPv6 packets with Inner IP Checksum error.
For NAT-only calls, packets with ICMP/ICMPv6 errors are dropped, and other packets are allowed.
This command also applies to ICMP/ICMPv6 packets with Inner IP Checksum error.
For NAT-only calls, packets with ICMP/ICMPv6 errors are dropped, and other packets are allowed.
Example
The following command configures Stateful Firewall to drop packets with ICMP/ICMPv6 Checksum errors:
firewall icmp-checksum-error drop