Requirements (cont.) REQ-10: The TCP binding timeout for NATs and the filter rule timeout for firewalls MUST be greater than 7800 seconds. REQ-11: A NAT/firewall SHOULD support forwarding fragmented packets (SF). REQ-12: A NAT/FW MUST support ICMP Destination Unreachable (SU). REQ-12a: The ICMP timeout SHOULD be greater than 2 seconds. REQ-13: A NAT/FW SHOULD support forwarding multicast packets (SM). |