close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

re-assembler

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
re-assembler {
    action-on-reassembly-failure (drop | drop-session | ignore);
    (force-tcp-window-checks | no-force-tcp-window-checks);
    (ignore-memory-overflow | no-ignore-memory-overflow);
    (ignore-reassembly-memory-overflow | no-ignore-reassembly-memory-overflow);
    ignore-reassembly-overflow;
    max-flow-mem value;
    max-packet-mem-ratio percentage-value;
     max-synacks-queued value;
    (tcp-error-logging | no-tcp-error-logging);
}

Hierarchy Level

content_copy zoom_out_map
[edit security idp sensor-configuration]

Description

Configure TCP reassembler for IDP sensor settings.

Options

max-flow-mem

Define the maximum TCP flow memory that the IDP sensor can handle.

Syntax: value—Maximum TCP flow memory in kilobytes.
Range: 64 through 4,294,967,295 kilobytes
Default: 1024 kilobytes

max-synacks-queued

Define the maximum limit for queuing Syn/Ack packets with different SEQ numbers.

Syntax: value—Maximum synchronization acknowledgements queued with different SEQ numbers.
Range: 0 through 5

max-packet-mem-ratio

By default, values for IDP reassembler packet memory are established as percentages of all memory. In most cases, these default values are adequate.

If a deployment exhibits an excessive number of dropped TCP packets or retransmissions resulting in high IDP reassembly memory usage, use the max-packet-mem-ratio option to reset the percentage of available IDP memory for IDP reassembly packet memory. Acceptable values are between 5 percent and 40 percent.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.2. Packet memory ratios added in Junos OS Release 12.1X44-D20.

arrow_backward PREVIOUS rdma-opcode

NEXT arrow_forward re-enroll-trigger-time-percentage

Junos CLI Reference

ON THIS PAGE