Network Attack Prevention Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
681
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
T
O
C
ONFIGURE
A
LL
A
TTACKS
FOR
AN
A
TTACK
O
BJECT
(I
NCLUDING
D
EFAULT
/ O
PTIONAL
)
E
XAMPLE
ALU(config-firewall-attack-A1)# all
ALU(config-firewall-attack-A1)# no all
The following are the Optional attacks that are not present in the default
attack prevention list of the OA-700:
icmp_router_advertisement
icmp_redirect
ip_spoofing
icmp_block_trace_route
ip_source_routing
udp_snork_attack
T
O
C
ONFIGURE
I
NDIVIDUAL
A
TTACK
FOR
AN
A
TTACK
O
BJECT
The following command enables you to configure attacks (both Default - stateful
and stateless and Optional attacks) individually for an attack object.
Command (in F-ACM)
Description
all
This command is used to configure all
the attacks (
including all Default and
Optional attacks
) for an attack object.
no all
The ‘no’ command disables all the
attacks configured for an attack object.
Command (in F-ACM)
Description
udp-port-loopback
[
threshold
<1-4294967295> <1-4294967295>
]
This command is used to configure udp-
port-loopback attack for an attack
object.
udp-flood
[
threshold <1-
4294967295> <1-4294967295>
]
This command is used to configure udp-
flood attack for an attack object.
port-scan
[
threshold <1-
4294967295> <1-4294967295>
]
This command is used to configure
port-scan attack for an attack object.
tcp-fin-scan
This command is used to configure tcp-
fin-scan attack for an attack object.
icmp-ip-address-sweep
[
threshold <1-4294967295> <1-
4294967295>
]
This command is used to configure
icmp-ip-address-sweep attack for an
attack object.
icmp-dest-unrch-storm
[
threshold <1-4294967295> <1-
4294967295>
]
This command is used to configure
icmp-dest-unrch-storm attack for an
attack object.
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...