F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

96
[Sysname-zone-trust] ip virtual-reassembly
# Display fragment information for security zone Trust.
<Sysname> display ip virtual-reassembly vd 1 zone trust
Zone trust:
Virtual Fragment Reassembly is enabled.
Concurrent reassemblies(max-reassemblies): 64
Fragments per reassembly(max-fragments): 16
Reassembly timeout(timeout): 3 second(s)
Drop fragments: OFF
Current reassembly count: 12
Current fragment count: 48
Total reassembly count: 6950
Total reassembly failures: 9
Table 25 Command output
Field Descri
p
tion
Concurrent reassemblies (max-reassemblies) Maximum number of concurrent reassemblies.
Fragments per reassembly(max-fragments) Maximum number of fragments per reassembly.
Reassembly timeout(timeout) Timeout interval of each reassembly.
Drop fragments
OFF/ON means dropping all fragments is
disabled/enabled.
ip virtual-reassembly
Use ip virtual-reassembly to enable the IP virtual fragment reassembly feature. You can set the maximum
number of fragments per reassembly, the maximum number of concurrent reassemblies, and the timeout
interval of a reassembly.
Use undo ip virtual-reassembly to disable IP virtual fragment reassembly.
Syntax
ip virtual-reassembly [ drop-fragments | max-fragments number | max-reassemblies number | timeout
seconds ] *
undo ip virtual-reassembly
Default
The IP virtual fragment reassembly feature is disabled.
Views
Security zone view
Default command level
2: System level
Parameters
drop-fragments: Specifies the interface to drop all fragments.
max-fragments number: Specifies the maximum number of fragments per reassembly. It ranges from 1 to
255, and the default is 16.