R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

Figure 61 Virtual fragment reassembly configuration page

Table 38 Virtual fragment reassembly configuration items

Item Descri

tion

Security Zone Specify a security zone to be configured with virtual fragment reassembly.

Enable Virtual Fragment

Reassembly

Select the check box to enable the virtual fragment reassembly feature.

Specify max number of

concurrent reassemblies

Specify the maximum number of concurrent reassemblies. When this value is

reached, the device discards all subsequent packets and sends a syslog

message.

This option is available after the virtual fragment reassembly feature is enabled.

Specify max number of

fragments per reassembly

Specify the maximum number of fragments in each reassembly. When this

value is reached, the device discards all subsequent fragments of the

reassembly and sends a syslog.

This option is available after the virtual fragment reassembly feature is enabled.

Specify timeout value of the

datagram being

reassembled

Set the aging time for each reassembly. If the fragments of a datagram (in a

reassembly) are not reassembled within this time, all the fragments of the

datagram are discarded.

This option is available after the virtual fragment reassembly feature is enabled.

Drop all the incoming

fragments

Select the check box to discard all incoming fragments.

This option is available after the virtual fragment reassembly feature is enabled.

Virtual fragment reassembly configuration example

Network requirements

• As shown in Figure 62, Host can access Router through Firewall.

• Host is connected to Firewall A through GigabitEthernet 0/1 that is in the trusted zone.