Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 709 / 1193

Network Attack Prevention Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
683
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
E
XAMPLE
ALU(config-firewall-attack-A1)# ip-tear-drop
Note: The ‘no’ command disables the individual attack configured for an attack object.
Example:
ALU(config-firewall-attack-A1)# no ip-tear-drop
Note: You can also modify the System Default Attack Object by entering into the system-
default attack object.
E.g.
ALU(config-firewall)# attack system-default
ALU(config-firewall-attack-system-default)# all
T
O
L
OG ALL THE
A
TTACKS
E
XAMPLE
ALU(config-firewall-attack-A1)# log
ALU(config-firewall-attack-A1)# no log
ip-tiny-frag [{ max-frag-num
| min-frag-size } <1-
4294967295> ]
This command is used to configure ip-
tiny-frag attack for an attack object.
icmp-ping-of-death [{ max-frag-
num | max-total-length } <1-
4294967295> ]
This command is used to configure
icmp-ping-of-death attack for an attack
object.
ip-tear-drop
This command is used to configure ip-
tear-drop attack for an attack object.
Command (in F-ACM) Description
log
This command logs all the attacks in the
log server.
no log
This ‘no’ command disables logging of
the attacks.
Command (in F-ACM) Description