Руководство По Обслуживанию для Cisco Cisco Packet Data Gateway (PDG)

Configuration Management

Generally Available    06-30-2010 

3-118

This command enables and configures the TCP intercept parameters to prevent TCP SYN 
flooding attacks by intercepting and validating TCP connection requests for DoS protection 
mechanism configured with the 

 command. In v8.0 this command was 

available in the Active Charging Service Configuration mode. In v8.1 it is moved to the 
Rulebase Configuration mode.

firewall tcp-syn-flood-intercept { max-attempts max_attempts | mode { none 

retransmit_timeout | watch-timeout intercept_watch_timeout }

This functionality is not supported at this time on the Web Element Manager.

This command defines a firewall rule definition to analyze user traffic based on the protocol 
being transported by IP packets. The following keywords were added to this command: 

●

: Enables specifying a protocol by its name.

●

: Enables specifying a protocol lesser than or equal to, 

or greater than or equal to a protocol assignment number.

[ no ] ip protocol { { operator { protocol | protocol_assignment } } | { 

operator protocol_assignment } }

This functionality is not supported at this time on the Web Element Manager.