xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
471
Chapter 32
DoS Attack
Prevention Commands
config dos_prevention dos_type
[{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan |
tcp_synfin | tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack} | all]
{action [drop] | state [enable | disable]}(1)
config dos_prevention log
[enable | disable]
config dos_prevention trap
[enable | disable]
show dos_prevention
{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan | tcp_synfin |
tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack}
32-1
config dos_prevention dos_type
Description
This command is used to configure the prevention of each DoS attacks. The packet matching will
be done by hardware. For a specific type of attack, the content of the packet will be matched
against a specific pattern.
Format
config dos_prevention dos_type [{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan
| tcp_synfin | tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack} | all]
{action [drop] | state [enable | disable]}(1)
Parameters
land_attack
- (Optional) Specifies that the DoS attack prevention type will be set to prevent
LAND attacks.
blat_attack
- (Optional) Specifies that the DoS attack prevention type will be set to prevent BLAT
attacks.
tcp_null_scan
- (Optional) Specifies that the DoS attack prevention type will be set to prevent
TCP Null Scan attacks.
tcp_xmasscan
- (Optional) Specifies that the DoS attack prevention type will be set to prevent
TCP Xmas Scan attacks.
tcp_synfin
- (Optional) Specifies that the DoS attack prevention type will be set to prevent TCP
SYN FIN attacks.
tcp_syn_srcport_less_1024
- (Optional) Specifies that the DoS attack prevention type will be
set to prevent TCP SYN Source Port Less 1024 attacks.
ping_death_attack
- (Optional) Specifies that the DoS attack prevention type will be set to
prevent Ping of Death attacks.
tcp_tiny_frag_attack
- (Optional) Specifies that the DoS attack prevention type will be set to
prevent TCP Tiny Frag attacks.
all
- Specifies that the DoS attack prevention type will be set to prevent all attacks.
action
- (Optional) Specifies the action that the DoS Prevention function will take.
drop
- Specifies to drop all matched DoS attack packets.
state
- (Optional) Specifies the DoS Attack Prevention state.
enable
- Specifies that the DoS Attack Prevention state will be enabled.
disable
- Specifies that the DoS Attack Prevention state will be disabled.
Содержание xStack
Страница 1: ......
Страница 161: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 156 DGS 3620 28SC admin ...
Страница 503: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 498 DGS 3620 28SC admin ...
Страница 553: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 548 ...
Страница 565: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 560 ...
Страница 888: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 883 DGS 3620 28SC admin ...
Страница 1011: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 1006 ...
Страница 1120: ...xStack DGS 3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide 1115 ...