Stateful Firewall Thresholds
ā Configuring Stateful Firewall Thresholds
ā Cisco ASR 5000 Series Thresholding Configuration Guide
Configuring Stateful Firewall Thresholds
This section describes how to enable and configure Stateful Firewall thresholds.
Enabling Thresholds
To enable thresholds use the following configuration:
configure
threshold monitoring firewall
end
Configuring Threshold Polling Intervals
To configure threshold poll interval use the following configuration:
configure
threshold poll fw-deny-rule interval <interval>
threshold poll fw-dos-attack interval <interval>
threshold poll fw-drop-packet interval <interval>
threshold poll fw-no-rule interval <interval>
end
Configuring Thresholds Limits
To configure threshold limits use the following configuration:
configure
threshold fw-deny-rule <high_thresh> [ clear <low_thresh> ]
threshold fw-dos-attack <high_thresh> [ clear <low_thresh> ]
threshold fw-drop-packet <high_thresh> [ clear <low_thresh> ]
threshold fw-no-rule <high_thresh> [ clear <low_thresh> ]
end