aliveness sign before activating IKE DPD. (Default:
No)
IPsecHardwareAcceleration
IPsec hardware acceleration. (Default: Inline)
IPsecDisablePKAccel
Disable hardware acceleration for public-key opera-
tions. (Default: No)
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
3.52.10. IPSettings
Description
Settings related to the IP protocol.
Properties
EnableIPv6
Enable processing of IPv6 traffic. (Default: No)
LogReceivedHopLimit0
Log received packets with Hop-Limit=0; this should
never happen! (Default: Yes)
HopLimitMin
The minimum IP Hop-Limit value accepted on re-
ceipt. (Default: 3)
HopLimitOnLow
What action to take on too low unicast Hop-Limit
values. (Default: DropLog)
HopLimitMinMulticast
The minimum IP multicast Hop-Limit value accep-
ted on receipt. (Default: 3)
HopLimitOnLowMulticast
What action to take on too low multicast Hop-Limit
values. (Default: DropLog)
DefaultHopLimit
The default IP Hop-Limit of packets originated by
the security gateway (32-255). (Default: 255)
IP6Fl
Validate IPV6 Flow label header field. (Default: Ig-
nore)
IP6TC
Validate IPV6 Traffic class header field. (Default:
Ignore)
IP6MaxExtHdr
Maximum allowed size of all IP6 extension headers.
(Default: 256)
IP6OnMaxExtHdr
Validate the extension header length when it goes
beyond IP6MaxExtHdr. (Default: DropLog)
IP6MaxOptHdr
Total number of options allowed per IP6 extension
header. (Default: 8)
IP6OnMaxOptHdr
Validate the number of options per extension header
when it goes beyond IP6MaxOptHdr. (Default:
3.52.10. IPSettings
Chapter 3. Configuration Reference
178
