Draytek Vigor130, User Manual

Page: 194 / 288

Vigor130 Series User’s Guide 184
Valid: 1 ~ 1440
%Now: 1440
> ddns time 1000
ddns time <update in minutes>
Valid: 1 ~ 1440
%Now: 1000
T T e e l l n n e e t t C C o o m m m m a a n n d d : : d d o o s s
This command allows users to configure the settings for DoS defense system.
dos [-V | D | A]
dos [-s ATTACK_F [THRESHOLD][ TIMEOUT]]
dos [-a | e [ATTACK_F][ATTACK_0] | d [ATTACK_F][ATTACK_0]]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
-V It means to view the configuration of DoS defense system.
-D It means to deactivate the DoS defense system.
-A It means to activate the DoS defense system.
-s It means to enable the defense function for a specific attack
and set its parameter(s).
ATTACK_F It means to specify the name of flooding attack(s) or
portscan, e.g., synflood, udpflood, icmpflood, or postscan.
THRESHOLD It means the packet rate (packet/second) that a flooding
attack will be detected. Set a value larger than 20.
TIMEOUT It means the time (seconds) that a flooding attack will be
blocked. Set a value larger than 5.
-a It means to enable the defense function for all attacks listed
in ATTACK_0.
-e It means to enable defense function for a specific attack(s).
ATTACK_0 It means to specify a name of the following attacks:
ip_option, tcp_flag, land, teardrop, smurf, pingofdeath,
traceroute, icmp_frag, syn_frag, unknow_proto, fraggle.
-d
It means to disable the defense function for a specific
attack(s).
E
E
x
x
a
a
m
m
p
p
l
l
e
e
>dos –A
The Dos Defense system is Activated
>dos –s synflood 50 10
Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec>