H3C Technologies H3C SecBlade LB Cards - Manual (Page 220)

209
Figure 101 Configuring virtual fragment reassembly
After the configuration, if the LB product receives disordered fragments from security zone Trust, it
examines and reassembles them.
Configuring virtual fragment reassembly at the CLI
Configuration guidelines
• The IP virtual fragment reassembly feature only applies to incoming packets on an interface.
• The IP virtual fragment reassembly feature does not support load sharing. The fragments of an IP
datagram cannot arrive through different interfaces.
Configuration procedure
To configure IP virtual fragment reassembly:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter VD system view. switchto vd vd-name
Required for a non-default
VD.
3. Enter security zone view. zone name zone-name [ id zone-id ] N/A
4. Configure IP virtual
fragment reassembly.
ip virtual-reassembly [ drop-fragments |
max-fragments number | max-reassemblies
number | timeout seconds ] *
By default, the feature is
enabled.
5. Display IP virtual fragment
reassembly information
on the VD.
display ip virtual-reassembly vd vd-name
[ zone zone-name ] [ | { begin | exclude |
include } regular-expression ]
Optional.