How to apply parameter map?

[cluovpemb]

Ok this may seem a bit of a dumb question but I just can't get a straight answer from Googling or from the IOS release 15.2 Security Config guide for ZFW.  So,I am editing the parameter map that governs tcp queue length in the OoO (Out of Order) global parameter map:

Router(config)#parameter-map type ooo global

Once I've made my changes, do I need to add this to a policy map?  Or does this just go into effect by default somehow? 

Thank you.

[Julio Carvajal]

Hello Colin,

To configure OoO support, use theparameter-map type ooo global command.

I will recommend you this book ( I read long time ago)

http://www.amazon.com/Deploying-Zone-Based-Firewalls-Shortcut-ebook/dp/B000P28WP8/ref=sr_1_1?ie=UTF8&qid=1352836270&sr=8-1&keywords=zone+based+firewall

Goes right to the point but it does explains and shows you a lot of examples of basic and advanced options over ZBFW ( Great book if you want to start from scratch )

Regards,

Julio

[cluovpemb]

Hi Julio,

Well, I bought this ebok at Cisco Press ($14.99).  I don't have a Kindle unfortunately.  Normally I'd try bittorrents for this kind of thing but when it comes to business and work related material I like to keep it official. 

The ebook is only 112 pages which is good since I already have the CCNA Security book from Cisco Press queued up for reading but I think this ebook will be a good starter and is probably more to the point with real world talk. 

By the way, if you answer my question above, I can then Mark Correct Answer    Since I have the OoO parameter map defined, do I now need to apply it?  I know reading the book might give me an answer but just so I can get this particularthread off of my "to do" list I am hoping for the quick answer.  I know how to apply a parameter map to a policy map, just wondering whether these global ones like the ooo one need that, or are they applied by default and so you just need to edit their configs to change how they work. 

[Julio Carvajal · Accepted solution]

Hello Colin,

I would recommend you that book you bought for ZBFW purposes, its pretty good and have some examples you could use to develop your own lab recreations,

Now regarding your query this is a global command so no need to apply it to a specific policy-map,

I also recommend you this command for OOO handeling:

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_i2.html#wp1063773

Regards

[cluovpemb]

Thanks Julio. 

[Mr.Kumar]

Hello,

I know it's old topic but do you have any commands for IOS-XE version for OOO. i have applied following commands but it didn't work

parameter-map type ooo global

tcp reassembly queue length 1024

Do you have any suggestions for IOS-XE. Thanks