D-Link DGS-1210/ME series, Справочное руководство

Страница: 79 / 522

DGS-1210/ME Metro Ethernet Switch CLI Reference Guide
59
drop.
state [enable | disable]- Enable or disable DoS prevention.
Restrictions Only administrator or operate-level users can issue this command.
Example usage:
To configure a land attack and blat attack prevention:
DGS-1210-28MP/ME:5# config dos_prevention dos_type blat_attack action drop
Command: config dos_prevention dos_type blat_attack action drop
Success.
DGS-1210-28MP/ME:5#
show dos_prevention
Purpose Used to display DoS prevention information.
Syntax show dos_prevention { land_attack | blat_attack | smurf_attack |
tcp_null_scan | tcp_xmascan | tcp_synfin |
tcp_syn_srcport_less_1024 }
Description The show dos_prevention command is used to display DoS
prevention information, including the type of DoS attack, the
prevention state, the corresponding action if the prevention is
enabled, and the counter information of the DoS packet.
Parameters The type of DoS attack. Possible values are as follows:
land_attack, blat_attack, smurf_attack, tcp_null_scan, tcp_xmascan
tcp_synfin and tcp_syn_srcport_less_1024.
Restrictions None.
Example usage:
To display DoS prevention information:
DGS-1210-28MP/ME:5# show dos_prevention
Command: show dos_prevention
Trap/Log : Disabled
DosType State Action Frame Counts
-------------------------------------- ---------- ---------------- --------------------
Land Attack Enabled Drop -
Blat Attack Enabled Drop -
Tcp Null Scan Disabled Drop -
Tcp Xmascan Disabled Drop -
Tcp Synfin Enabled Drop -
Tcp Syn Srcport less 1024 Enabled Drop -
Ping Death Attack Disabled Drop -
Tcp Tiny Fragment Disabled Drop -
To display DoS prevention information for Land Attack:
DGS-1210-28MP/ME:5# show dos_prevention land_attack