ignore-reassembly-memory-overflow | no-ignore-reassembly-memory-overflow
Syntax
(ignore-reassembly-memory-overflow | no-ignore-reassembly-memory-overflow);
Hierarchy Level
[edit security idp sensor-configuration re-assembler]
Description
Reassembly memory overflow occurs when the memory
allocated for the reassembly of TCP fragments is exceeded. When the
reassembly of TCP fragments exceeds the memory limit, defined with max-packet-mem-ratio, you can define the system behavior to
ignore or drop the offending packets. If the ignore-reassembly-memory-overflow command is enabled on the SRX device, IDP will ignore and permit
packets from sessions which trigger a reassembly memory overflow.
If you enable the no-ignore-reassembly-memory-overflow command
when reassembly memory overflow occurs, packets of that session are
dropped by the device. By default, the ignore-reassembly-memory-overflow command is enabled.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.2.