Cisco Small Business 300 1.1 Series, Руководство администратора

Страница: 600 / 706

Quality of Service (QoS) Commands
78-20269-01 Command Line Interface Reference Guide 602
41
There are three types of attacks against which protection can be supplied (see
parameters below).
Use the no form of this command to disable DoS protection.
Syntax
security-suite dos protect
{add attack | remove attack
}
no security-suite dos protect
Parameters
•
add/remove attack —Specifies the attack type to add/remove. To add an
attack is to provide protection against it; to remove the attack is to remove
protection.
The possible attack types are:
-
stacheldraht—Discards TCP packets with source TCP port 16660.
-
invasor-trojan—Discards TCP packets with destination TCP port 2140
and source TCP port 1024.
-
back-orifice-trojan—Discards UDP packets with destination UDP port
31337 and source UDP port 1024.
Default Configuration
No protection is configured.
Command Mode
Global Configuration mode
User Guidelines
For this command to work, security-suite enable must be enabled globally.
Example
The following example protects the system from the Invasor Trojan DOS attack.
Console(config)#
security-suite dos protect add invasor-trojan