Managed Switch CLI Manual, Release 8.0
Switching Commands
3-181
v1.0, July 2009
dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having a
TCP Header Size smaller then the configured value, the packets will be dropped if the mode is
enabled.The default is
disabled.
If you enable dos-control firstfrag, but do not provide a
Minimum TCP Header Size, the system sets that value to
20
.
no dos-control firstfrag
This command sets Minimum TCP Header Size Denial of Service protection to the default value
of
disabled
.
dos-control tcpfrag
This command enables TCP Fragment Denial of Service protection. If the mode is enabled, Denial
of Service prevention is active for this type of attack. If packets ingress having IP Fragment Offset
equal to one (1), the packets will be dropped if the mode is enabled.
no dos-control tcpfrag
This command disabled TCP Fragment Denial of Service protection.
Default
disabled <20>
Format
dos-control firstfrag
[<0-255>]
Mode
Global Config
Format
no dos-control firstfrag
Mode
Global Config
Default
disabled
Format
dos-control tcpfrag
Mode
Global Config
Format
no dos-control tcpfrag
Mode
Global Config
Summary of Contents for FSM726v3 - ProSafe Fast Ethernet L2 Managed Switch
Page 4: ...v1 0 July 2009 iv...
