Cisco Cisco Packet Data Gateway (PDG)

PSF Changes in Release 17

PSF Enhancements for 17.0 ▀

Release Change Reference, StarOS Release 17 ▄

409



Firewall Policy IPv6



NAT Policy NAT44



NAT Policy NAT64



Bypass NAT Flow Present



No Firewall ruledef(s) match the specified criteria



No Default Firewall ruledef(s) match the specified criteria



Predefined Firewall Rules Enabled List

CSCuh60799 - Remove memory fair usage feature

Applicable Products: GGSN, HA, IPSG, PDSN, P-GW

Feature Changes

Memory Fair Usage Feature

The Memory Fair Usage feature has been deprecated in this release and is no longer supported.

CSCul71133 - Merge all the uplink firewall feature enabling to single CLI

Applicable Products: GGSN, HA, IPSG, PDSN, P-GW

Feature Changes

Uplink Firewall Support

Enabling the uplink flooding, port-scan and IP-sweep features has been changed in this release.

Previous Behavior: The uplink flooding, port-scan and IP-sweep features were enabled through separate CLIs in the
ACS Configuration mode.

New Behavior: Enabling the uplink flooding, port-scan and IP-sweep features must be made in a Firewall-and-NAT
Policy that has to be configured in the ACS Configuration mode.

The following CLIs in the ACS Configuration mode that are duplicate Firewall-and-NAT Policy CLIs will be
concealed. Backward compatibility is provided to support the previous behavior and configuration.



firewall dos-protection flooding



firewall dos-protection ip-sweep



firewall dos-protection port-scan