DryTek Vigor 2952 series, User Manual

Page: 623 / 811

Vigor2952 Series User’s Guide 611
-s Enable the defense function for a specific attack and set its
parameter(s).
ATTACK_F Specify the name of flooding attack(s) or portscan, e.g., synflood,
udpflood, icmpflood, or postscan.
THRESHOLD It means the packet rate (packet/second) that a flooding attack will
be detected. Set a value larger than 20.
TIMEOUT It means the time (seconds) that a flooding attack will be blocked.
Set a value larger than 5.
-a Enable the defense function for all attacks listed in ATTACK_0.
-e Enable defense function for a specific attack(s).
ATTACK_0 Specify a name of the following attacks: ip_option, tcp_flag, land,
teardrop, smurf, pingofdeath, traceroute, icmp_frag, syn_frag,
unknow_proto, fraggle.
-d Disable the defense function for a specific attack(s).
E
E
x
x
a
a
m
m
p
p
l
l
e
e
>dos –A
The Dos Defense system is Activated
>dos –s synflood 50 10
Synflood is enabled! Threshold=50 <pke/sec> timeout=10 <pke/sec>
T T e e l l n n e e t t C C o o m m m m a a n n d d : : e e x x i i t t
Type this command will leave telnet window.
T
T
e
e
l
l
n
n
e
e
t
t
C
C
o
o
m
m
m
m
a
a
n
n
d
d
:
:
I
I
n
n
t
t
e
e
r
r
n
n
e
e
t
t
This command allows you to configure detailed settings for WAN connection.
S S y y n n t t a a x x
internet -W n -M n [-<command> <parameter> | ... ]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
-W n W means to set WAN interface.
1=WAN1, 2=WAN2,…. Default is WAN1.
-M n M means to set Internet Access Mode (Mandatory) and n means
different modes (represented by 0 – 3)
n=0: Offline
n=1: PPPoE
n=2: Dynamic IP
n=3: Static IP
n=4: PPTP with Dynamic IP,
n=5: PPTP with Static IP,
n=6: L2TP with Dynamic IP
n=7: L2TP with Static IP
n=A: 3G/4G USB Modem(PPP mode),
n=B: 3G/4G USB Modem(DHCP mode)
<command><parameter>|…] The available commands with parameters are listed below.
[…] means that you can type in several commands in one line.
-S <isp name> Set ISP Name (max. 23 characters).