Cisco ASR 5000 Series

Stateful Firewall Thresholds
▀ Configuring Stateful Firewall Thresholds
▄ Cisco ASR 5000 Series Thresholding Configuration Guide
134
OL-25552-02
Configuring Stateful Firewall Thresholds
This section describes how to enable and configure Stateful Firewall thresholds.
Enabling Thresholds
To enable thresholds use the following configuration:
configure
threshold monitoring firewall
end
Configuring Threshold Polling Intervals
To configure threshold poll interval use the following configuration:
configure
threshold poll fw-deny-rule interval <interval>
threshold poll fw-dos-attack interval <interval>
threshold poll fw-drop-packet interval <interval>
threshold poll fw-no-rule interval <interval>
end
Configuring Thresholds Limits
To configure threshold limits use the following configuration:
configure
threshold fw-deny-rule <high_thresh> [ clear <low_thresh> ]
threshold fw-dos-attack <high_thresh> [ clear <low_thresh> ]
threshold fw-drop-packet <high_thresh> [ clear <low_thresh> ]
threshold fw-no-rule <high_thresh> [ clear <low_thresh> ]
end