ZyXEL Communications P-660HWP-D1, Руководство пользователя

Страница: 347 / 374

Appendix F Firewall Commands
P-660HWP-D1 User’s Guide
347
config edit firewall attack
minute-high <0-255>
This command sets the threshold rate of new
half-open sessions per minute where the P-
660HWP-D1 starts deleting old half-opened
sessions until it gets them down to the
minute-low threshold.
config edit firewall attack
minute-low <0-255>
This command sets the threshold of half-open
sessions where the P-660HWP-D1 stops
deleting half-opened sessions.
config edit firewall attack
max-incomplete-high <0-255>
This command sets the threshold of half-open
sessions where the P-660HWP-D1 starts
deleting old half-opened sessions until it gets
them down to the max incomplete low.
config edit firewall attack
max-incomplete-low <0-255>
This command sets the threshold where the
P-660HWP-D1 stops deleting half-opened
sessions.
config edit firewall attack
tcp-max-incomplete <0-255>
This command sets the threshold of half-open
TCP sessions with the same destination
where the P-660HWP-D1 starts dropping
half-open sessions to that destination.
Sets
config edit firewall set <set
#> name <desired name>
This command sets a name to identify a
specified set.
Config edit firewall set <set
#> default-permit <forward |
block>
This command sets whether a packet is
dropped or allowed through, when it does not
meet a rule within the set.
Config edit firewall set <set
#> icmp-timeout <seconds>
This command sets the time period to allow
an ICMP session to wait for the ICMP
response.
Config edit firewall set <set
#> udp-idle-timeout <seconds>
This command sets how long a UDP
connection is allowed to remain inactive
before the P-660HWP-D1 considers the
connection closed.
Config edit firewall set <set
#> connection-timeout
<seconds>
This command sets how long P-660HWP-D1
waits for a TCP session to be established
before dropping the session.
Config edit firewall set <set
#> fin-wait-timeout <seconds>
This command sets how long the P-660HWP-
D1 leaves a TCP session open after the
firewall detects a FIN-exchange (indicating
the end of the TCP session).
Table 157 Firewall Commands (continued)
FUNCTION COMMAND DESCRIPTION