re-assembler
Syntax
re-assembler {
action-on-reassembly-failure (drop | drop-session | ignore);
(force-tcp-window-checks | no-force-tcp-window-checks);
(ignore-memory-overflow | no-ignore-memory-overflow);
(ignore-reassembly-memory-overflow | no-ignore-reassembly-memory-overflow);
ignore-reassembly-overflow;
max-flow-mem value;
max-packet-mem-ratio percentage-value;
max-synacks-queued value;
(tcp-error-logging | no-tcp-error-logging);
}
Hierarchy Level
[edit security idp sensor-configuration]
Description
Configure TCP reassembler for IDP sensor settings.
Options
| max-flow-mem | Define the maximum TCP flow memory that the IDP sensor can handle.
|
| max-synacks-queued | Define the maximum limit for queuing Syn/Ack packets with different SEQ numbers.
|
| max-packet-mem-ratio | By default, values for IDP reassembler packet memory are established as percentages of all memory. In most cases, these default values are adequate. If a deployment exhibits an excessive number of
dropped TCP packets or retransmissions resulting in high IDP reassembly
memory usage, use the |
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.2. Packet memory ratios added in Junos OS Release 12.1X44-D20.