IP and UDP Checksum Enforcement
Description
The Internet checksum also called the IPv4 header checksum is a checksum used in version 4 of the Internet Protocol (IPv4) to detect corruption in the header of IPv4 packets. It is carried in the IP packet header, and represents the 16-bit result of summation of the header words.
The UDP checksum is a 16-bit one’s complement sum of the UDP header, payload, and a pseudo-header with IP addresses, protocol, and UDP length. It starts with the aggregation of the UDP header, payload, and a pseudo-header, which is a construct that includes the source and destination IP addresses, the protocol indicating UDP, and the UDP length.
IP and UDP Checksum Enforcement
To configure IP and UDP checksum enforcement:
- Navigate to Device|Firewall Settings|Advanced.
- Scroll to IP and UDP Checksum Enforcement.
- To drop packets with incorrect checksums in the IP header by enforcing IP header checksums, select Enable IP header checksum enforcement. This option is not selected by default.
- To drop packets with incorrect checksums in the UDP header by enforcing UDP header checksums, select Enable UDP checksum enforcement. This option is not selected by default.
- Click Save
TIP: Enable IP header checksum enforcement: Select this to enforce IP header checksums. Packets with incorrect checksums in the IP header are dropped. This option is disabled by default. TIP: Enable UDP checksum enforcement: Select this to enforce UDP packet checksums. Packets with incorrect checksums are dropped. This option is disabled by default.
Related Articles
Categories
not finding your answers?