UANTA COMPUTER INC.
Layer 2,3,IPv6+QoS Switch
_____________________________________________________________________________
Layer 2,3,IPv6+QoS Network Switch User Manual Version 0.1
Page: 326/970
6.13.2 Configuration Commands
6.13.2.1 dos-control sipdip
This command enables Source IP Address = Destination IP Address (SIP=DIP) Denial of
Service protection. If the mode is enabled, Denial of Service prevention is active for this type of
attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
Syntax
dos-control sipdip
no dos-control sipdip
no - This command disables Source IP Address = Destination IP Address (SIP=DIP)
Denial of Service prevention.
Default Setting
Disabled
Command Mode
Global Config
6.13.2.2 dos-control firstfrag
This command enables Minimum TCP Header Size Denial of Service protection. If the mode is
enabled, Denial of Service prevention is active for this type of attack. If packets ingress having
a TCP Header Size smaller then the configured value, the packets will be dropped if the mode
is enabled. The default is disabled. If you enable dos-control firstfrag, but do not provide a
Minimum TCP Header Size, the system sets that value to 20.
Syntax
dos-control firstfrag [<0-255>]
no dos-control firstfrag
<0-255> - This command sets minimum TCP header length
no - This command sets Minimum TCP Header Size Denial of Service protection to the
default value of disabled.
