Smartdefense Network-Security Ip-Icmp Packet-Sanity - D-Link NetDefend DFL-CP310 Cli Reference Manual

smartdefense network-security ip-icmp packet-sanity

smartdefense network-security ip-icmp packet-
sanity
P
URPOSE
The

smartdefense network-security ip-icmp packet-sanity

variable is used for working with Packet Sanity settings in the following ways:
• Configuring Packet Sanity settings
• Displaying and exporting Packet Sanity settings
Packet Sanity performs several Layer 3 and Layer 4 sanity checks. These include
verifying packet size, UDP and TCP header lengths, dropping IP options, and
verifying the TCP flags.
S
YNTAX
When used with
set
set smartdefense network-security ip-icmp packet-sanity [enforce enforce] [log log]
[disable-relaxed-udp-len-verification disable-relaxed-udp-len-verification]
When used with
show
show smartdefense network-security ip-icmp packet-sanity [enforce | log | disable-
relaxed-udp-len-verification]
F
IELDS
enforce
318
:
:
String. Indicates whether to enable blocking packets that fail a
sanity test. This can have the following values:
•
enabled
•
disabled
The default value is
- Blocking is enabled.
- Blocking is disabled.
enabled
.
D-Link NetDefend CLI Reference Guide