1995
firewall fragments-inspect [ high | low ]
Syntax firewall fragments-inspect [ high | low ] { number | default }
undo firewall fragments-inspect [ high | low ]
View System view
Parameter high number: Specifies the high watermark value of the number of fragment
status records.
low number: Specifies the low watermark value of the number of fragment status
records.
default: Specifies the default number of fragment status records.
Description Use the
firewall fragments-inspect [ high | low ] command to configure the
high and low watermark values for fragments inspection.
Use the
undo firewall fragments-inspect [ high | low ] command to restore
the default high and low watermark values.
By default, the high watermark value is 2,000 and low watermark value is 1500.
The low watermark value must be smaller than or equal to the high watermark
value.
Related command: firewall fragments-inspect and firewall packet-filter.
Example # Set the high watermark for fragment inspection to 3,000 and low watermark to
the default value.
<Sysname> system-view
[Sysname] firewall fragments-inspect high 3000
[Sysname] firewall fragments-inspect low default
firewall ipv6 fragments-inspect
Syntax firewall ipv6 fragments-inspect
undo firewall ipv6 fragments-inspect
View System view
Parameter None
Description Use the
firewall ipv6 fragments-inspect command to enable IPv6 fragments
inspection.
