< Home

display fragment-reassemble configuration

Function

The display fragment-reassemble configuration command displays the global fragment reassembly configuration.

Format

display fragment-reassemble configuration [ slot slot-id cpu cpu-id ]

Parameters

Parameter Description Value
slot slot-id

Specifies a slot ID.

The value range depends on the device configuration.

cpu cpu-id

Specifies a CPU ID.

The value range depends on the device configuration.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Before running this command, you must run the defence engine enable command to enable the IAE.

Example

# Display the global fragment reassembly configuration.

<HUAWEI> display fragment-reassemble configuration
Fragment Reassembly statistics on slot 0 cpu 0 :                                
------------------------------------------------------------------------------  
Fragment Reassembly Configuration:                                              
------------------------------------------------------------                    
  enable                : on                                                    
  overflow-mode         : forward                                               
  overlap-mode          : consistency                                           
  time-out(s)           : 5                                                     
  packet-cache(packets) : 255                                                   
  total-cache(packets)  : 1000                                                  
  defense-check         : off                                                   
  pass-through          : off                                                   
------------------------------------------------------------                    
Table 1 Description of the display fragment-reassemble configuration command output

Item

Description

Fragment Reassembly statistics on slot 0 cpu 0 Fragment Reassembly statistics on a specific slot and CPU
Fragment Reassembly Configuration

Global fragment reassembly configuration

enable

State of the fragment reassembly function.

  • on: The function is enabled.
  • off: The function is disabled.
overflow-mode

Method for handling packets arriving at a full buffer in fragment reassembly:

  • discard: Packets arriving at a full buffer are discarded.
  • forward: Packets arriving at a full buffer are forwarded straight through.
overlap-mode

Policy to handle overlapping fragments:

consistency indicates that overlapping fragments are processed based whether the overlapping parts have the same content.

time-out(s)

Fragment reassembly timeout in seconds

packet-cache(packets)

Fragment buffer size (in number of packets) for each packet

total-cache(packets)

Total buffer size in number of packets

defense-check

Status of the fragment attack defense function:

  • on: The function is enabled.
  • off: The function is disabled.
pass-through

Status of the fragment reassembly pass-through mode:

  • on: The pass through mode is enabled.
  • off: The pass through mode is disabled.
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >