stateful-packet-inspection-l2

bridge

Enables a SIP (stateful packet inspection) at the layer 2 firewall. SPI, also referred to as dynamic packet filtering, is a security feature that tracks the operating state and characteristics of network connections traversing it. It distinguishes legitimate packets for different types of connections, and only allows packets matching a known active connection to pass.

Supported on the following devices:

Syntax

stateful-packet-inspection-l2

Parameters

None

Example

nx9500-6C8809(config-profile-testnx9500-bridge-vlan-1)#stateful-packet-insinspection-l2
nx9500-6C8809(config-profile-testnx9500-bridge-vlan-1)#

Related Commands

no Disables stateful packet inspection at the layer 2 firewall