INS_CNGE28FX4TX24MS(2,POE2/48)
04/30/18 PAGE 90
INSTALLATION AND OPERATION MANUAL
CNGE28FX4TX24MS(2,POE2/48)
TECH SUPPORT: 1.888.678.9427
Figure 4-59. Security > DoS Prevention > DoS Global Settings
Table 4-57. Security > DoS Prevention > DoS Global Settings
Item
Description
DMAC = SMAC
Click Enabled or Disabled to define DMAC-SMAC for the DoS Global settings.
LAND
Click Enabled or Disabled to define LAND for the DoS Global settings.
UDP Blat
Click Enabled or Disabled to define UDP Blat for the DoS Global settings.
TCP Blat
Click Enabled or Disabled to define TCP Blat for the DoS Global settings.
POD
Click Enabled or Disabled to define POD for the DoS Global settings.
IPv6 Min Fragment
Click Enabled or Disabled to define minimum fragment size for the IPv6
protocol.
Enter the variable in bytes (0 to 65535) to set the minimum fragment size when
the function is enabled.
ICMP Fragments
Click Enabled or Disabled to define the ICMP Fragments function.
IPv4 Ping Max Size
Click Enabled or Disabled to set the maximum ping size for the IPv4 protocol.
IPv6 Ping Max Size
Click Enabled or Disabled to set a maximum ping size for the IPv6 protocol.
Ping Max Size Setting
Enter the variable in bytes (0 to 65535) to set the maximum ping size.
Smurf Attack
Click Enabled or Disabled to set the Smurf Attack function.
TCP Min Hdr Size
Click Enabled or Disabled to set the minimum header size.
Enter the variable in bytes (0 to 31) to set the minimum header size.
TCP-SYN (SPORT < 1024) Click Enabled or Disabled to set the TCP synchronization function (sport < 1021).
Null Scan Attack
Click Enabled or Disabled to set the Null Scan Attack function.
X-Mas Scan Attack
Click Enabled or Disabled to set the X-Mas Scan function.
TCP SYN-FIN Attack
Click Enabled or Disabled to set the TCP synchronization termination attack
function.
TCP SYN-RST Attack
Click Enabled or Disabled to set the TCP synchronization reset attack function.
TCP Fragment (Offset = 1)Click Enabled or Disabled to set the TCP fragment function (offset =1).
Apply
Click Apply to save the values and update the screen.
The ensuing table for DoS Global Information settings are informational only: DMAC = SMAC,
Land Attack, UDP Blat, TCP Blat, POD (Ping of Death), IPv6 Min Fragment Size, ICMP Fragment
Packets, IPv4 Ping Max Packet Size, IPv6 Ping Max Packet Size, Smurf Attack, TCP Min Header
Length, TCP Syn (SPORT < 1024), Null Scan Attack, X-Mas Scan Attack, TCP SYN-FIN Attack, TCP
SYN-RST Attack and TCP Fragment (Offset = 1).
