Filter
Top Products
Firewall Feature Set Commands
16-118 Configuring Security
Defaults
Denyall
Mode
Globalconfiguration:XSR(config)#
Example
ThefollowingexamplepermitsanyremotehosttorunaPPTPtunneltoaserverontheinternal
network:
XSR(config)#ip firewall network pptp-server 120.21.1.18/32 internal
XSR(config)#ip fire filter allow--gre ANY_EXTERNAL pptp-server 47 protocol-id
XSR(config)#ip firewall filter allow--gre pptp-server ANY_EXTERNAL protocol-id 47
ip firewall icmp timeout
ThiscommanddefinestheobjectwhichhandlesallconfigurationforICMPpacketinspection.
Syntax
ip firewall icmp timeout <seconds>
Syntax of the “no” Form
Thenoformofthiscommandsetsthetimeouttothedefaultvalue:
no ip firewall icmp timeout
Default
Timeout:60seconds
Mode
Globalconfiguration:XSR(config)#
Example
ThefollowingexampleresetstheICMPidleti meoutinterval:
XSR(config)#ip firewall icmp timeout 300
ip firewall java and ip firewall activex
ThiscommanddefinestheobjectthatallowsordeniesHTMLpageswithembeddedJavaor
ActiveXappletsfromparticularorallIPaddresses.Anameforanyfirewallobjectmustusethese
alpha‐numericcharactersonly:
A‐Z(upperorlowercase),0‐9,-(dash),or _(underscore).Also,
allfirewallobjectnamesarecase‐sensitive.
seconds
IdletimeoutforICMPsessions,rangingfrom60to86400seconds.