icmp-ip-address-sweep
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
607
Alcatel-Lucent
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
ICMP
-
IP
-
ADDRESS
-
SWEEP
icmp-ip-address-sweep
[
threshold
<
1-4294967295
> <
1-4294967295
>]
D
ESCRIPTION
An address sweep attack occurs when
a source IP address sends number of
ICMP echo requests (or pings) to different hosts within a defined interval. The
purpose of this scheme is to ping several hosts in the hope that one will reply, thus
uncovering an address to target, resulting in system failure. This command is
included in the
OA-700’s
default attack prevention list.
P
ARAMETERS
D
EFAULT
V
ALUE
•
2 packets per 10 milliseconds
•
5,000 microseconds is the default
E
XAMPLE
ALU(config-firewall-attack-A1)# icmp-ip-address-sweep threshold
18 6
Parameter
Description
threshold
Threshold limit set.
1-4294967295
Number of packets permissible within a
defined interval.
1-4294967295
The limiting time to which the packets
can be sent.