Cisco Sx350, Руководство CLI

Страница: 268 / 1323

Denial of Service (DoS) Commands
267 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
10
/prefix-length}} | remove {ip-address {mask | /prefix-length}},
and removes all
entries added by the user. The user can remove a specific entry by using remove
ip-address {mask | /prefix-length}
parameter.
There is no no form of the security-suite deny martian-addresses
reserved {add |
remove} command. Use instead the security-suite deny martian-addresses
reserved
remove
command to remove protection (and free up hardware
resources).
Parameters
•
reserved add/remove—Add or remove the table of reserved addresses
below.
•
ip-address—Adds/discards packets with the specified IP source or
destination address.
•
mask—Specifies the network mask of the IP address.
•
prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
•
reserved—Discards packets with the source or destination IP address in
the block of the reserved (Martian) IP addresses. See the User Guidelines
for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
For this command to work, show security-suite configuration must be enabled
globally.