3Com Switch 8800 Family Firewall Module Configuration and Command Reference Guide

Packet Filtering Firewall Configuration Commands 301
<SecBlade_FW> display firewall fragment
display firewall
packet-filter statistics
Syntax
display firewall packet-filter statistics { all | interface type number |
fragments-inspect }
View
Any view
Parameter
all: Displays the filtering packet statistics of all the interfaces.
interface type number: Displays the filtering packets statistics of the specified
interface.
fragments-inspect: Displays the fragment inspection information.
Description
Use the display firewall packet-filter statistics command to view the firewall
packet filtering statistics.
Example
# Display the information of fragment inspection.
<SecBlade_FW> display firewall-statistics fragments-inspect
Fragments inspection is enabled.
The high-watermark for clamping is 10000.
The low-watermark for clamping is 1000.
Current records for fragments inspection is 0.
firewall packet-filter
default
Syntax
firewall packet-filter default { permit | deny }
View
System view
Parameter
permit: Default filter rule is permitting packets to pass.
deny: Default filter rule is denying packets to pass.
Description
Use the firewall packet-filter default command to configure the default
filtering rule of the firewall packet filtering, whether to be "permit" or "deny".
By default, the system denies all packets.
Example
# Set the default filtering rule of the firewall packet filtering to "deny".
[SecBlade_FW] firewall packet-filter default deny