Cisco Cisco Packet Data Gateway (PDG)
Firewall-and-NAT Policy Configuration Mode Commands
firewall tcp-options-error ▀
Command Line Interface Reference, StarOS Release 16 ▄
4989
firewall tcp-options-error
This command configures Stateful Firewall action on packets with TCP Option errors.
Product
PSF
Privileges
Security Administrator, Administrator
Mode
Exec > ACS Configuration > Firewall-and-NAT Policy Configuration
active-charging service service_name > fw-and-nat policy policy_name
Entering the above command sequence results in the following prompt:
[local]host_name(config-fw-and-nat-policy)#
Syntax
firewall tcp-options-error { drop | permit }
default firewall tcp-options-error
default
Configures the default setting.
Default:
Default:
permit
drop
Drops packets with TCP Option errors.
permit
Permits packets with TCP Option errors.
Usage
Use this command to configure Stateful Firewall action on packets with TCP Option errors.
Example
The following command configures Stateful Firewall to drop packets with TCP Option errors:
firewall tcp-options-error drop