149
IP-COM(config)# mac access-list 125
Note:
Enter ACL 125
IP-COM(config-mac-nacl)# no bind-to interface range gigabitethernet 0/1
Note:
Undo binding between ACL 125 and port 1
IP-COM(config)# ip access-list extended 1
IP-COM(config-ip-nacl)#no bind-to interface range gigabitethernet 0/1-4
Note:
Enter ACL 1, and undo binding between ACL 1 and ports 1-4
Display ACL settings
IP-COM# show access-lists
Note:
Display all ACLs and all bound ports
IP-COM# show access-lists 1
Note:
Display ACL 1 and its bound port(s)
5.3.26 DoS Attack Defense Configuration
IP-COM(config)# ip deny ping-of-death
Note:
Enable Ping of Death Attack Defense
IP-COM(config)# no ip deny ping-of-death
Note:
Disable Ping of Death Attack Defense
IP-COM(config)# ip deny land
Note:
Enable Land Attack Defense
IP-COM(config)# no ip deny land
Note:
Disable Land Attack Defense
IP-COM(config)# ip deny null-scan
Note:
Enable NULL Scan Attack Defense
IP-COM(config)# no ip deny null-scan
Note:
Disable NULL Scan Attack Defense
IP-COM(config)# ip deny syn-port-less-1024
Note:
Enable Drop SYN packets with source port smaller than 1024
IP-COM(config)# no ip deny syn-port-less-1024
Note:
Disable Drop SYN packets with source port smaller than 1024
Summary of Contents for G3224P
Page 1: ......
