SNR S2940-8G-v2, Configuration Manual

Page: 333 / 420

SNR S2940-8G-v2 Switch Configuration Guide
Security Feature Configuration
48.2.3 Anti Port Cheat Function Configuration Task Sequence
1. Enable the anti port cheat function
Command Explanation
Global mode
[no] dosattack-check srcport-equal-dstport
enable Enable/disable the prevent-port-cheat function.
48.2.4 Prevent TCP Fragment Attack Function Configuration Task Sequence
1. Enable the prevent TCP fragment attack function
2. Configure the minimum permitted TCP head length of the packet
Command Explanation
Global mode
[no] dosattack-check tcp-
fragment enable
Enable/disable the prevent TCP fragment attack function.
dosattack-check tcp-header
<size>
Configure the minimum permitted TCP head length of the
packet. This command has no effect when used separately,
the user should enable the dosattack-check tcp-fragment
enable.
Note: This function is not supported by switch.
48.2.5 Prevent ICMP Fragment Attack Function Configuration Task Sequence
1. Enable the prevent ICMP fragment attack function
2. Configure the max permitted ICMPv4 net load length
Command Explanation
Global mode
[no] dosattack-check icmp-
attacking enable
Enable/disable the prevent ICMP fragment attack function.
dosattack-check icmpv4-size
<size>
Configure the max permitted ICMPv4 net load length. This
command has not effect when used separately, the user
have to enable the dosattack-check icmp-attacking enable.
333