Fragsettings - D-Link NetDefend DFL-210 Cli Reference Manual

Network security firewall
Hide thumbs Also See for NetDefend DFL-210:
Table of Contents

Advertisement

3.55.7. FragSettings

IfaceMon_BelowIfaceLoad
IfaceMon_MinInterval
IfaceMon_RxErrorPerc
IfaceMon_TxErrorPerc
IfaceMon_ErrorTime
3.55.7. FragSettings
Description
Settings related to fragmented packets.
Properties
PseudoReass_MaxConcurrent
IllegalFrags
DuplicateFragData
FragReassemblyFail
DroppedFrags
DuplicateFrags
FragmentedICMP
MinimumFragLength
ReassTimeout
ReassTimeLimit
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
above this percentage. (Default: 80)
Temporarily disable interface monitor on an interface if net-
work load on the interface goes above this percentage.
(Default: 70)
Minimum interval between two resets of the same interface.
(Default: 30)
At what percentage of errors to received packets to declare a
problem. (Default: 20)
At what percentage of errors to sent packets to declare a prob-
lem. (Default: 7)
How long a problem must persist before an interface is reset.
(Default: 10)
Maximum number of concurrent fragment reassemblies. Set
to 0 to drop all fragments. (Default: 1024)
Illegaly constructed fragments; partial overlaps, bad sizes,
etc. (Default: DropLog)
On receipt of duplicate fragments, verify matching data...
(Default: Check8)
Failed packet reassembly attempts - due to timeouts or packet
losses. (Default: LogSuspectSubseq)
Fragments of packets dropped due to rule base. (Default:
LogSuspect)
Duplicate fragments received. (Default: LogSuspect)
Fragmented ICMP messages other than Ping; normally inval-
id. (Default: DropLog)
Minimum allowed length of non-last fragments. (Default: 8)
Timeout of a reassembly, since previous received fragment.
(Default: 65)
Maximum lifetime of a reassembly, since first received frag-
ment. (Default: 90)
190
Chapter 3. Configuration Reference

Advertisement

Table of Contents
loading

Table of Contents