set service-system-default GRE

Description

Configures settings of the built-in GRE service object.

Syntax

set service-system-default GRE [ ip-protocol <ip-protocol> ] [ disable-inspection <disable-inspection> ] [ session-timeout <session-timeout>] [ accept-replies <accept-replies> ] [ match <match> ] [ keep-connections-open-after-policy-installation <keep-connections-open-after-policy-installation> ] [ sync-connections-on-cluster <sync-connections-on-cluster> ] [ aggressive-aging-enable <aggressive-aging-enable> ] [ aggressive-aging-timeout <aggressive-aging-timeout> ]

Parameters

Parameter

Description

accept-replies

Specifies if service replies are to be accepted.

aggressive-aging-enable

Enable to manage the connections table capacity and memory consumption of the firewall to increase durability and stability.

aggressive-aging-timeout

Time (in seconds) before the aggressive aging times out.

disable-inspection

Disable deep inspection of traffic matching this service.

Type: Boolean (true/false)

ip-protocol

IP Protocol number.

Type: A number with no fractional part (integer)

keep-connections- open-after-policy- installation

True to keep connections open after policy has been installed, even if they are not allowed under the new policy.

match

INSPECT expression that searches for a pattern in a packet, only relevant for services of type 'other'.

session-timeout

Time (in seconds) before the session times out

sync-connections-on-cluster

Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster. Of the services allowed by the Rule Base, only those with synchronize connections on cluster will be synchronized as they pass through the cluster.

Example

set service-system-default GRE ip-protocol 15 disable-inspection true session-timeout 15 accept-replies true match TEXT keep-connections-open-after-policy-installation true sync-connections-on-cluster true aggressive-aging-enable true aggressive-aging-timeout 15