Cisco 300 Series, Руководство CLI

Страница: 367 / 1117

Denial of Service (DoS) Commands
367 OL-32830-01 Command Line Interface Reference Guide
16
security-suite deny martian-addresses
reserved
adds or removes the addresses
in the following table:
Note that if the reserved addresses are included, individual reserved addresses
cannot be removed.
Example
The following example discards all packets with a source or destination address in
the block of the reserved IP addresses.
switchxxxxxx(config)# security-suite deny martian-addresses reserved add
16.4 security-suite deny syn
To block the creation of TCP connections from a specific interface, use the
security-suite deny syn Interface (Ethernet, Port Channel) Configuration mode
command. This a complete block of these connections.
To permit creation of TCP connections, use the no form of this command.
Address Block Present Use
0.0.0.0/8 (except
when 0.0.0.0/32 is
the source
address) Addresses in this block refer to source hosts
on "this" network.
127.0.0.0/8 This block is assigned for use as the Internet
host loopback address.
192.0.2.0/24 This block is assigned as "TEST-NET" for use
in documentation and example code.
224.0.0.0/4 as
source This block, formerly known as the Class D
address space, is allocated for use in IPv4
multicast address assignments.
240.0.0.0/4 (except
when
255.255.255.255/3
2 is the destination
address) This block, formerly known as the Class E
address space, is reserved.