Hello All, In this CBAC task, we are asked to configure the following :
" Agressive dropping should stop when the number of incomplete sessions hit 300 no matter what" I would configure this as *"ip inspect max-incomplete low 300"* , which is also given in the DSG. The solution that is confusing me is, there is also this line *"ip inspect one-minute low 300" *configured. Why is this needed? Can i just configure the "high" one minute threshold as required by the task and stop there? Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
