fw tcp

Firewall TCP parameters

tcp Specification

Parameter	Value
Type	Intermediate Resource
Element Name	tcp
Element URI	/axapi/v3/fw/tcp
Element Attributes	tcp_attributes
Partition Visibility	shared
Schema	tcp schema

Operations Allowed:

Operation	Method	URI	Payload
Get Object	GET	/axapi/v3/fw/tcp	tcp_attributes

tcp attributes

mss-clamp

Description: mss-clamp is a JSON Block. Please see below for mss-clamp

Type: Object

Reference Object: /axapi/v3/fw/tcp/mss-clamp

reset-on-error

Description: reset-on-error is a JSON Block. Please see below for reset-on-error

Type: Object

Reference Object: /axapi/v3/fw/tcp/reset-on-error

syn-cookie

Description: syn-cookie is a JSON Block. Please see below for syn-cookie

Type: Object

Reference Object: /axapi/v3/fw/tcp/syn-cookie

reset-on-error

Specification	Value
Type	object

enable

Description Enable send TCP reset on error

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

outbound

Description ‘enable’: Enable send TCP reset on error;

Type: string

Supported Values: enable

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

syn-cookie

Specification	Value
Type	object

sampling-enable

Type: List

syn-cookie-enable

Description Enable Firewall Syn-Cookie Protection

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

syn-cookie-on-threshold

Description on-threshold for Syn-cookie (Decimal number)

Type: number

Range: 1-1000000

syn-cookie-on-timeout

Description on-timeout for Syn-cookie (Timeout in seconds, default is 120 seconds (2 minutes))

Type: number

Range: 1-300000

Default: 120

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

syn-cookie_sampling-enable

Specification	Value
Type	list
Block object keys

counters1

Description ‘all’: all; ‘syn_ack_sent’: SYN cookie SYN ACK sent; ‘verification_passed’: SYN cookie verification passed; ‘verification_failed’: SYN cookie verification failed; ‘conn_setup_failed’: SYN cookie connection setup failed;

Type: string

Supported Values: all, syn_ack_sent, verification_passed, verification_failed, conn_setup_failed

mss-clamp

Specification	Value
Type	object

min

Description Specify the min value allowed for the TCP MSS (Specify the min value allowed for the TCP MSS (default: ((576 - 60 - 60))))

Type: number

Range: 0-1460

Default: 456

mss-clamp-type

Description ‘fixed’: Specify a fixed max value for the TCP MSS; ‘subtract’: Specify the value to subtract from the TCP MSS;

Type: string

Supported Values: fixed, subtract

mss-subtract

Description Specify the value to subtract from the TCP MSS (default: not configured)

Type: number

Range: 0-1460

mss-value

Description The max value allowed for the TCP MSS (default: not configured)}

Type: number

Range: 0-1460

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters