10
INSPECT part
level II
< C R >
Modify inspection rule
n a m e < r u l e - n a m e > < F r a g | T C P | U D P | F T P | H 3 2 3 | T F T P | L 2 T P | S I P >
d i s a b l e < C R >
Disable specific protocol inspection function
n a m e _ d e l e t e < 1 ~ 4 >
Delete inspection rule
s y n w a i t - t i m e < 1 ~ 1 2 0 >
TCP session to be established waiting time
f i n w a i t - t i m e < 1 ~ 6 0 >
TCP session to be closed waiting time
t c p
i d l e - t i m e < 1 8 0 0 ~ 7 2 0 0 >
TCP session idle timeout
u d p
i d l e - t i m e < 1 ~ 1 2 0 >
UDP session idle timeout
h i g h < 1 ~ 3 0 0 >
Maximum existing half-open sessions
m a x - i n c o m p l e t e
l o w < 1 ~ 2 5 0 >
Minimum existing half-open sessions
h i g h < 1 ~ 2 5 0 >
Maximum rate of new half-open session
o n e - m i n u t e
l o w < 1 ~ 2 0 0 >
Minimum rate of new half-open session
p o r t _ s c a n _ d e f e c t < 5 0 ~ 5 0 0 0 > < 1 ~ 1 5 0 >
'Port Scan/Flooding' defect sensitive criteria
f r a g m e n t < 1 0 ~ 6 0 0 0 0 > < 1 ~ 1 5 0 > < 1 ~ 1 2 0 >
Fragmention half-open entry threshold
b l o c k - t i m e < 0 ~ 3 0 0 0 0 >
Flood hacker blocking time
i n s p e c t
h 3 2 3 - t i m e o u t < 0 ~ 3 6 0 0 >
H.323 data channel idle timeout
ROUTE part
level II
a d d < n e t w o r k _ i p > < n e t m a s k > < g a t e w a y _ i p >
Add static route entry
s t a t i c
d e l e t e < 1 ~ 2 0 >
Delete static route entry
g e n e r i c < D i s a b l e | E n a b l e > < D i s a b l e | E n a b l e >
Config operation and auto summary mode
v e r s i o n < N o n e | R I P 1 | R I P 2 >
Config RIP protocol version
a t t r i b < D i s a b l e | E n a b l e | S i l e n t >
< N o n e | P A S S W O R D | M D 5 > < D i s a b l e | E n a b l e >
Config operation, authentication and Poison
reverse mode
l a n < 1 ~ 4 >
a u t h e n t i c a t e < s t r i n g >
Config authentication code
v e r s i o n < N o n e | R I P 1 | R I P 2 >
Config RIP protocol version
a t t r i b < D i s a b l e | E n a b l e | S i l e n t >
< N o n e | P A S S W O R D | M D 5 > < D i s a b l e | E n a b l e >
Config operation, authentication and Poison
reverse mode
w l a n < 1 ~ 1 >
a u t h e n t i c a t e < s t r i n g >
Config authentication code
v e r s i o n < N o n e | R I P 1 | R I P 2 >
Config RIP protocol version
a t t r i b < D i s a b l e | E n a b l e | S i l e n t >
< N o n e | P A S S W O R D | M D 5 > < D i s a b l e | E n a b l e >
Config operation, authentication and Poison
reverse mode
r o u t e
r i p
a t m < 1 ~ 8 >
a u t h e n t i c a t e < s t r i n g >
Config authentication code
DHCP part
level II
i n t e r f a c e < i n t e r f a c e >
DHCP server activate interface
d h c p
s e r v e r _ g e n e r i c
g a t e w a y < i p >
Default gateway for DHCP client
