Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

security firewall name <name> rule <rule-number> fragment

Defines fragmented packets for a firewall rule.

set security firewall name name rule rule-number fragment
delete security firewall name name rule rule-number fragment
show security firewall name name rule rule-number [ fragment ]
name
The name of a firewall rule.
rule-number
The numeric identifier of a rule. The identifier ranges from 1 through 9999.
fragment
Specifies matching for fragmented packets. This option only works for rule sets applied to bridges (l2 direction) or QoS. It does not work elsewhere, as IPv4 and IPv6 fragments are reassembled before being processed by the firewall.

Configuration mode


security {
    firewall {
        name name {
            rule rule-number 
                fragment 
        }
    }
}

Use the set form of this command to define the matching of fragmented packets within a firewall rule.

Use the delete form of this command to delete the matching of fragmented packets from a firewall rule.

Use the show form of this command to display the matching of fragmented packets from a firewall rule.