SMC Networks Barricade SMC7004ABR User Manual page 62

Configuring the Barricade Router
•
Connection Policy – Enter the appropriate values for TCP/
UDP sessions as described in the following table.
Parameter
Fragmentation
half-open wait
TCP SYN wait
TCP FIN wait
TCP connection
idle timeout
UDP session idle
timeout
H.323 data
channel idle
timeout
DoS Criteria and Port Scan Criteria
Set up DoS and port scan criteria in the spaces provided (as
shown below).
Parameter
Total incomplete TCP/
UDP sessions HIGH
54
Defaults Description
10 sec Configures the number of seconds
that a packet state structure
remains active. When the timeout
value expires, the router drops the
unassembled packet, freeing that
structure for use by another packet.
30 sec Defines how long the software will
wait for a TCP session to
synchronize before dropping the
session.
5 sec Specifies how long a TCP session
will be maintained after the firewall
detects a FIN packet.
3600 The length of time a TCP session
seconds will be maintained if there is no
(1 hour) activity.
30 sec The length of time a UDP session
will maintained if there is no activity.
180 sec The length of time an H.323
session will be maintained if there
is no activity.
Defaults
300 sessions
Description
Defines the rate of newly
unestablished sessions that
will cause the software to
start deleting half-open
sessions.