Fortinet white logo
Fortinet white logo

New Features

Handling IPv4 SCTP packets with zero checksum on the NP7 platform 7.2.8

Handling IPv4 SCTP packets with zero checksum on the NP7 platform 7.2.8

Note

This information is also available in the FortiOS 7.2 Administration Guide:

The sctp-csum-err command provides flexibility to discard or permit IPv4 SCTP packets with zero checksum on the NP7 platform.

config system npu
    config fp-anomaly
        set sctp-csum-err {allow | drop | trap-to-host}
    end
end
allow The NP7 platform will forward all SCTP packets with zero checksum.
drop The NP7 platform will drop all SCTP packets with zero checksum. This is the default value.
trap-to-host

NP7 anomaly protection for SCTP will be disabled and SCTP packets with zero checksum will be forwarded.

Note

This option can also be used with a DoS policy to configure anomaly protection. If policy-offload-level is set to dos-offload, DoS policy anomaly protection is offloaded to the NP7 platform.

Handling IPv4 SCTP packets with zero checksum on the NP7 platform 7.2.8

Handling IPv4 SCTP packets with zero checksum on the NP7 platform 7.2.8

Note

This information is also available in the FortiOS 7.2 Administration Guide:

The sctp-csum-err command provides flexibility to discard or permit IPv4 SCTP packets with zero checksum on the NP7 platform.

config system npu
    config fp-anomaly
        set sctp-csum-err {allow | drop | trap-to-host}
    end
end
allow The NP7 platform will forward all SCTP packets with zero checksum.
drop The NP7 platform will drop all SCTP packets with zero checksum. This is the default value.
trap-to-host

NP7 anomaly protection for SCTP will be disabled and SCTP packets with zero checksum will be forwarded.

Note

This option can also be used with a DoS policy to configure anomaly protection. If policy-offload-level is set to dos-offload, DoS policy anomaly protection is offloaded to the NP7 platform.