fragment-reassemble user-configure
Function
The fragment-reassemble user-configure command configures user-defined items for the fragment reassembly function.
The undo fragment-reassemble user-configure command cancels the configuration of user-defined items for the fragment reassembly function.
Format
fragment-reassemble user-configure { defense-check | pass-through }
undo fragment-reassemble user-configure { defense-check | pass-through }
Parameters
| Parameter | Description | Value |
|---|---|---|
| defense-check | Indicates fragment attack defense. | - |
| pass-through | Indicates the pass through mode. | - |
Usage Guidelines
By default, all user-defined items of the fragment reassembly function are disabled.
After the pass through mode is enabled (using the fragment-reassemble user-configure pass-through command), in some special fragment traffic scenarios (for example, the fragments completely overlap, and the overlapped part has the same content), the system will regard the traffic as abnormal traffic and will not reassemble the fragments. If the fragment attack defense function has been enabled (using the fragment-reassemble user-configure defense-check command), the abnormal fragments will be discarded. If the fragment attack defense function has not been enabled, the system will forward the fragments. After the pass through mode is disabled, the system assembles the fragments based on the normal processing flow.
