Configuration Guide Configuring FPM
The strict packet status tracing function is disabled.
Global configuration mode
Use the no form of this command to restore the default configuration.
2.4.5.4 Verification
Use the show run command to check whether the configuration includes ip session track-state-strictly. If no, the
strict packet status tracing function is disabled.
2.4.5.5 Configuration Example
If ICMP flooding attacks occur in the current network environment, packet threshold check is needed. In
this case, perform this configuration to enable the packet threshold check function.
Enable the strict packet status tracing function on the forwarding device.
Ruijie# configure terminal
Ruijie(config)# ip session track-state-strictly
Use the show run command to verify that the configuration includes ip session track-state-strictly.
2.4.5.6 Common Errors
-
2.4.6 Configuring Loose TCP Status Check
2.4.6.1 Networking Requirements
A flow can be directly established with only ACK packets.
2.4.6.2 Notes
By default, the establishment of a flow with an ACK packet is not allowed on FW products but enabled on EG products.
This configuration is optional.
2.4.6.3 Configuration Steps
Optional configuration.
By default, the loose TCP status check function is disabled. You can use the ip session tcp-loose command to enable
the loose TCP status check function.