Sapido Ultimate WE-1120, User Manual

Page: 68 / 266

68
ICMP Verbose: Check or un-check this option to enable or disable protection
against ICMP error message attacks. ICMP messages can be used to fold your
network with undesired traffic.
Max IP Fragment Count: Enter the maximum number of fragments the Firewall
should allow for every IP packet. This option is required if your connection to the
ISP is through PPPoE. This data is used during transmission or reception of IP
fragments. When large sized packets are sent via the WE-1120, the packets are
chopped into fragments as large as MTU (Maximum Transmission Unit). By default,
this number is set to 45. If MTU of the interface is 1500(default for Ethernet), then
there can be a maximum of 45 fragments per IP packet. If the MTU is less, then
there can be more number of fragments and this number should be increased.
Minimum IP Fragment Size: Enter the Minimum size of IP fragments to be allowed
through Firewall. This limit will not be enforced on the last fragment of the packet. If
the Internet traffic is such that it generates many small sized fragments, this value
can be decreased. This can be found if there are lots of packet losses, degradation
in speed and if the flowing log message is generated very often: “fragment of size
less than configured minimum fragment size detected”.
5. Apply & Cancel
Click on Apply button to continue. Click on Cancel button to clean the setting on this
page.