Kontron CP6923, Reference Manual, Page: 170 / 480

Switching Commands CP6923
CP6923 CLI Reference Manual Page 2 - 126
2.25.2.1 no dos-control sipdip
This command disables Source IP address = Destination IP address (SIP=DIP) Denial of Service prevention.
2.25.3 dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is enabled, Denial of
Service prevention is active for this type of attack. If packets ingress having a TCP Header Size smaller then the
configured value, the packets will be dropped if the mode is enabled.The default is
disabled.
If you enable dos-
control firstfrag, but do not provide a Minimum TCP Header Size, the system sets that value to
20
.
2.25.3.1 no dos-control firstfrag
This command sets Minimum TCP Header Size Denial of Service protection to the default value of
disabled
.
2.25.4 dos-control tcpfrag
This command enables TCP Fragment Denial of Service protection. If the mode is enabled, Denial of Service
prevention is active for this type of attack. If packets ingress having IP Fragment Offset equal to one (1), the packets
will be dropped if the mode is enabled.
2.25.4.1 no dos-control tcpfrag
This command disabled TCP Fragment Denial of Service protection.
2.25.5 dos-control tcpflag
This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of Service prevention
is active for this type of attacks. If packets ingress having TCP Flag SYN set and a source port less than 1024 or
having TCP Control Flags set to 0 and TCP Sequence Number set to 0 or having TCP Flags FIN, URG, and PSH
Format
no dos-control sipdip
Mode Global Config
Default disabled <20>
Format
dos-control firstfrag
[<0-255>]
Mode Global Config
Format
no dos-control firstfrag
Mode Global Config
Default disabled
Format
dos-control tcpfrag
Mode Global Config
Format
no dos-control tcpfrag
Mode Global Config