Security - Best Practices
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
735
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
SYN A
TTACK
Knowing traffic pattern for the site helps in preventing this type of attack. For a e-
business site, it may be 20,000 syn packets/second. For a smaller site, it might be
20 syn packets/sec.
Hence, depending upon the traffic pattern, the threshold can be set. If the
threshold is crossed, it might be pointer to a syn attack. One can configure the
threshold as:
dos p1
tcp syn flood threshold 40 packets per msec
P
ORT
S
CAN
A
TTACKS
This attacks happens whereby one source IP address sends IP packets to 10
different ports at the same destination IP address within a defined interval. This is
again can be prevented by setting a threshold (.005 seconds is the default). This
can be shown as:
dos p1
udp port scan threshold 10 per 0.005 seconds
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...