Zyxel-communications P-661H Series Manual do Utilizador descarregar pdf (Página 331)

P-661H/HW Series User’s Guide

Appendix G 331

config edit firewall attack

minute-low <0-255>

This command sets the threshold of half-open

sessions where the ZyXEL Device stops

deleting half-opened sessions.

config edit firewall attack

max-incomplete-high <0-255>

This command sets the threshold of half-open

sessions where the ZyXEL Device starts

deleting old half-opened sessions until it gets

them down to the max incomplete low.

config edit firewall attack

max-incomplete-low <0-255>

This command sets the threshold where the

ZyXEL Device stops deleting half-opened

sessions.

config edit firewall attack

tcp-max-incomplete <0-255>

This command sets the threshold of half-open

TCP sessions with the same destination

where the ZyXEL Device starts dropping half-

open sessions to that destination.

Sets config edit firewall set <set

#> name <desired name>

This command sets a name to identify a

specified set.

Config edit firewall set <set

#> default-permit <forward |

block>

This command sets whether a packet is

dropped or allowed through, when it does not

meet a rule within the set.

Config edit firewall set <set

#> icmp-timeout <seconds>

This command sets the time period to allow an

ICMP session to wait for the ICMP response.

Config edit firewall set <set

#> udp-idle-timeout <seconds>

This command sets how long a UDP

connection is allowed to remain inactive

before the ZyXEL Device considers the

connection closed.

Config edit firewall set <set

#> connection-timeout

<seconds>

This command sets how long ZyXEL Device

waits for a TCP session to be established

before dropping the session.

Config edit firewall set <set

#> fin-wait-timeout <seconds>

This command sets how long the ZyXEL

Device leaves a TCP session open after the

firewall detects a FIN-exchange (indicating the

end of the TCP session).

Config edit firewall set <set

#> tcp-idle-timeout <seconds>

This command sets how long ZyXEL Device

lets an inactive TCP connection remain open

before considering it closed.

Table 142 Firewall Commands (continued)

FUNCTION COMMAND DESCRIPTION

1 2 ... 326 327 328 329 330 331 332 333 334 335 336 ... 382 383

Comentários a estes Manuais

Sem comentários