Configuring Stateful Firewall Thresholds; Enabling Thresholds; Configuring Threshold Polling Intervals; Configuring Thresholds Limits - Cisco ASR 5000 Series Thresholding Configuration Manual

▀ Configuring Stateful Firewall Thresholds

Configuring Stateful Firewall Thresholds
This section describes how to enable and configure Stateful Firewall thresholds.

Enabling Thresholds

To enable thresholds use the following configuration:
configure
threshold monitoring firewall
end

Configuring Threshold Polling Intervals

To configure threshold poll interval use the following configuration:
configure
threshold poll fw-deny-rule interval <interval>
threshold poll fw-dos-attack interval <interval>
threshold poll fw-drop-packet interval <interval>
threshold poll fw-no-rule interval <interval>
end

Configuring Thresholds Limits

To configure threshold limits use the following configuration:
configure
threshold fw-deny-rule <high_thresh> [ clear <low_thresh> ]
threshold fw-dos-attack <high_thresh> [ clear <low_thresh> ]
threshold fw-drop-packet <high_thresh> [ clear <low_thresh> ]
threshold fw-no-rule <high_thresh> [ clear <low_thresh> ]
end
▄ Cisco ASR 5000 Series Thresholding Configuration Guide
134
Stateful Firewall Thresholds
OL-25552-02