D-Link DXS-3250E - xStack Switch, Руководство по установке в сети

Страница: 143 / 424

DXS-3227, DXS-3227P, DXS-3250 and DXS-3250E EWS User Guide
Page 142
Defining DOS Protection Security
Denial of Service (DOS) increases network security by preventing packets with invalid IP addresses or arriving
from malicious networks from entering the network. Packets from malicious networks can compromise a network’s
stability.
The device provides a Security Suite that allows administrators to match and discard packets based on packet
header values. Packets which are redirected are analyzed for viruses and Trojans.
DoS enables network managers to:
•
Deny packets that contain reserved IP addresses
•
Prevent TCP connections from a specific interface
•
Discard echo requests from a specific interface
•
Discard IP fragmented packets from a specific interface
Defining DoS Prevention
To enable Denial of Service on the system:
1. Click Advanced Setup >Security Suite > DOS Attacks > Global Settings . The DOS Attacks Global Set-
tings Page opens.
Figure 83: DOS Attacks Global Settings Page
The DOS Attacks Global Settings Page contains the following fields:
•
Security Suite Status — Indicates if DOS security is enabled on the device. The possible field values are:
–
Enable — Enables DOS security. This is the default value.
–
Disable — Disables DOS security on the device.