Cisco 4700M Configuration Manual page 12

Contents
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
xii
Enabling the TCP Slow Start Algorithm
Setting the ACK Delay Timer
Configuring How the ACE Handles TCP SYN Segments that Contain
Data
4-20
Configuring How the ACE Handles TCP Options
Setting the Urgent Pointer Policy
Setting the Type of Service
Configuring a Traffic Policy for TCP/IP Normalization and Termination
Configuring a Layer 4 Class Map
Defining a Class Map Description
Specifying IP Address Match Criteria
Defining a TCP or UDP Port Number or Port Range Match Criteria
Configuring a Layer 3 and Layer 4 Policy Map
Associating a Layer 3 and Layer 4 Class Map with a Policy Map
Associating a Connection Parameter Map with a Policy Map
Associating a Layer 3 and Layer 4 Policy Map with a Service Policy
Configuring Interface Normalization Parameters
Disabling TCP Normalization on an Interface
Disabling the ICMP Security Checks on an Interface
Configuring SYN-Cookie Denial-of-Service Protection
Overview of SYN Cookie DoS Protection
Configuration and Operational Considerations
Configuring SYN Cookie DoS Protection on an Interface
Configuring How the ACE Handles the Don't Fragment Bit
Configuring How the ACE Handles IP Options
Setting the IP Packet TTL
Configuring Unicast Reverse-Path Forwarding
Configuring IP Fragment Reassembly Parameters
IP Fragment Reassembly Configuration Quick Start
Configuring the MTU for an Interface
4-19
4-19
4-20
4-24
4-25
4-26
4-27
4-28
4-31
4-33
4-34
4-36
4-39
4-40
4-40
4-42
4-44
4-26
4-29
4-31
4-32
4-33
4-35
4-36
4-37
4-38
4-38
4-42
OL-16202-01