R2511-HP MSR Router Series Security Command Reference(V5)

396
Usage guidelines
Be default, fragments inspection is disabled.
Examples
# Enable fragments inspection.
<Sysname> system-view
[Sysname] firewall fragments-inspect
Related commands
• display firewall-statistics fragments-inspect
• firewall packet-filter
firewall fragments-inspect { high | low }
Use firewall fragments-inspect { high | low } to set the high and low threshold values for fragments
inspection.
Use undo firewall fragments-inspect { high | low } to restore the defaults.
Syntax
firewall fragments-inspect { high | low } { number | default }
undo firewall fragments-inspect { high | low }
Default
The high threshold is 2000 and low threshold is 1500.
Views
System view
Default command level
2: System level
Parameters
high: Specifies the high threshold of the number of fragment status records.
low: Specifies the low threshold of the number of fragment status records.
number: Number of fragment status records.
default: Specifies the default number of fragment status records. With this keyword specified, the
specified threshold is restored to the default.
Usage guidelines
The low threshold must be smaller than or equal to the high threshold.
Examples
# Set the high threshold for fragment inspection to 3000 and restore the low threshold to the default.
<Sysname> system-view
[Sysname] firewall fragments-inspect high 3000
[Sysname] firewall fragments-inspect low default
Related commands
• display firewall-statistics fragments-inspect