cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2556
Views
0
Helpful
5
Replies

How to apply parameter map?

cluovpemb
Level 1
Level 1

Ok this may seem a bit of a dumb question but I just can't get a straight answer from Googling or from the IOS release 15.2 Security Config guide for ZFW.  So,I am editing the parameter map that governs tcp queue length in the OoO (Out of Order) global parameter map:

Router(config)#parameter-map type ooo global

Once I've made my changes, do I need to add this to a policy map?  Or does this just go into effect by default somehow? 

Thank you.

1 Accepted Solution

Accepted Solutions

Hello Colin,

I would recommend you that book you bought for ZBFW purposes, its pretty good and have some examples you could use to develop your own lab recreations,

Now regarding your query this is a global command so no need to apply it to a specific policy-map,

I also recommend you this command for OOO handeling:

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

5 Replies 5

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Colin,

To configure OoO support, use theparameter-map type ooo global command.

I will recommend you this book ( I read long time ago)

http://www.amazon.com/Deploying-Zone-Based-Firewalls-Shortcut-ebook/dp/B000P28WP8/ref=sr_1_1?ie=UTF8&qid=1352836270&sr=8-1&keywords=zone+based+firewall

Goes right to the point but it does explains and shows you a lot of examples of basic and advanced options over ZBFW ( Great book if you want to start from scratch )

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi Julio,

Well, I bought this ebok at Cisco Press ($14.99).  I don't have a Kindle unfortunately.  Normally I'd try bittorrents for this kind of thing but when it comes to business and work related material I like to keep it official. 

The ebook is only 112 pages which is good since I already have the CCNA Security book from Cisco Press queued up for reading but I think this ebook will be a good starter and is probably more to the point with real world talk. 

By the way, if you answer my question above, I can then Mark Correct Answer    Since I have the OoO parameter map defined, do I now need to apply it?  I know reading the book might give me an answer but just so I can get this particularthread off of my "to do" list I am hoping for the quick answer.  I know how to apply a parameter map to a policy map, just wondering whether these global ones like the ooo one need that, or are they applied by default and so you just need to edit their configs to change how they work. 

Hello Colin,

I would recommend you that book you bought for ZBFW purposes, its pretty good and have some examples you could use to develop your own lab recreations,

Now regarding your query this is a global command so no need to apply it to a specific policy-map,

I also recommend you this command for OOO handeling:

Regards

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Thanks Julio. 

Hello,

 

I know it's old topic but do you have any commands for IOS-XE version for OOO. i have applied following commands but it didn't work

parameter-map type ooo global

tcp reassembly queue length 1024

 

Do you have any suggestions for IOS-XE. Thanks

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: