Korenix Technology Co., Ltd.
Industrial
Layer 3 Managed Ethernet Switch
_____________________________________________________________________________
Industrial Layer 3 Managed Ethernet SwitchUser Manual
Page: 403/1246
!
6.8.8.2.5 dos-control l4port
This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial of Service
prevention is active for this type of attack. If packets ingress having Source TCP/UDP Port Number
equal to Destination TCP/UDP Port Number, the packets will be dropped if the mode is enabled.
Some applications mirror source and destination L4 ports - RIP for example uses 520 for
both. If you enable dos-control l4port, applications such as RIP may experience packet
loss which would render the application inoperable.
Syntax
dos-control l4port
no dos-control l4port
no -
This command disables L4 Port Denial of Service protections.
Default Setting
Disabled
Command Mode
Global Config
6.8.8.2.6 dos-control tcpport
This command enables the TCP L4 source = destination port number (Source TCP Port = Destination
TCP Port) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for
this type of attack. If packets ingress with Source TCP Port =Destination TCP Port, the packets will be
dropped if the mode is enabled.
Syntax
dos-control tcpport
no dos-control tcpport
no -
This command disables the TCP L4 source = destination port number (Source TCP Port
=Destination TCP Port) Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
