Draytek VigorSwitch P1085, User Manual, Page: 182 / 267

VigorSwitch P1085 User’s Guide 174
E
E
x
x
a
a
m
m
p
p
l
l
e
e
P1085# configure
P1085(config)# custom enable
P1085(config)#
T T e e l l n n e e t t C C o o m m m m a a n n d d : : d d o o s s
Use this command to enable specific Denial of Service (DoS) protection.
S
S
y
y
n
n
t
t
a
a
x
x
I
I
t
t
e
e
m
m
s
s
dos daeqsa-deny
dos icmp-frag-pkts-deny
dos icmp-ping-max-length
dos icmpv4-ping-max-check
dos icmpv6-ping-max-check
dos ipv6-min-frag-size-check
dos ipv6-min-frag-size-length
dos land-deny
dos nullscan-deny
dos pod-deny
dos smurf-deny
dos smurf-netmask
dos syn-sportl1024-deny
dos synfin-deny
dos synrst-deny
dos tcp-frag-off-min-check
dos tcpblat-deny
dos tcphdr-min-check
dos tcphdr-min-length
dos udpblat-deny
dos xma-deny
D D e e s s c c r r i i p p t t i i o o n n
Syntax Items Description
dos daeqsa-deny Drop the packets if the destination MAC address equals to the
source MAC address.
Related Syntax:
 <config># dos daeqsa-deny
dos icmp-frag-pkts-deny Drop the fragmented ICMP packets.
Related Syntax:
 <config># dos icmp-frag-pkts-deny
dos icmp-ping-max-length Set the maximum packet size for ICMPv4/ICMPv6 ping operation.
<0-65535> - Specify a packet number.
Related Syntax:
 <config># dos icmp-ping-max-length <0-65535>
dos icmpv4-ping-max-check Check ICMPv4 ping maximum packets size and drop the packets
larger than the maximum packet size defined by the command, dos
icmp-ping-max-length.
Related Syntax:
 <config># dos icmpv4-ping-max-check
dos icmpv6-ping-max-check Check ICMPv6 ping maximum packets size and drop the packets
larger than the maximum packet size defined by the command,
icmp-ping-max-length.
Related Syntax: