Configuring Stealth Mode; Configuring Firewall Policies - Nortel Secure 4134 Configuration

98 Firewall and NAT configuration
3
Table 30
Variable definitions
Variable
[no]
Configuring stealth mode
Enable stealth mode on the firewall to stop the sending of TCP reset packets
when there is no corresponding matching policy for an incoming packet. You
can configure this option either globally or for a specific firewall zone.
By default, this feature is disabled.
Procedure steps
Step
1
2
3
Table 31
Variable definitions
Variable
[<map-name>]
[no]
Configuring firewall policies
Configure firewall policies for a specific map. The maximum number of
policies for each map is 1024.
Copyright © 2007, Nortel Networks
.
To configure reset of invalid ACK packets, enter:
[no] reset-invalid-acks
Action
To enter configuration mode, enter:
configure terminal
To specify the map name to configure, or global firewall configuration,
enter:
firewall {global | <map-name>}
To configure reset of invalid ACK packets, enter:
[no] stealth-mode [<map-name>]
Nortel Secure Router 4134
Security — Configuration and Management
NN47263-600 01.02 Standard
10.0 3 August 2007
—End—
Value
Disables reset-invalid-acks.
—End—
Value
Specifies the map name.
Disables stealth mode.