SMC Networks SMC7904WBRAS-N2 V2 - QUICK, Руководство пользователя

Страница: 111 / 156

C
HAPTER
8
| Services
IGMP Proxy Configuration
– 111 –
■
TCP SynWithData: Prevents the hacker sending a volume of
requests for connections that cannot be completed.
■
UDP Bomb: Also called a UDP Flood or packet storm. Prevents the
hacker congesting the network by generating a flood of UDP packets
between it and the unit using the UDP chargen service (a testing
utility that generates a character string for every packet it
receives).
■
UDP EchoChargen: Prevents the hacker from sending a UDP
packet to the echo server with a source port set to the chargen
port.
■
packets/second: Enter the number of packets per second that you
want to scan for malicious activity.
■
Sensitivity: Specifies the sensivity of the TCP/UDP port scan
prevention. (Options: High, Low; Default: Low)
◆
Select All — Selects all DoS prevention measures listed.
◆
Clear All — Clears all fields.
◆
Enable Source IP Blocking — When multiple attacks are detected
from each of the fields listed above, or the packet threshold has been
exceeded - the IP address of the hacker is blocked.
◆
Block Time (sec) — Sets the length of time in seconds the IP address
should remain blocked.
IGMP P
ROXY
C
ONFIGURATION
Multicasting is useful when the same data needs to be sent to more than
one host. Using multicasting as opposed to sending the same data to the
individual hosts uses less network bandwidth. The multicast feature also
enables you to receive multicast video stream from multicast servers.
IP hosts use Internet Group Management Protocol (IGMP) to report their
multicast group memberships to neighboring routers. Similarly, multicast
routers use IGMP to discover which of their hosts belong to multicast
groups. This device supports IGMP proxy that handles IGMP messages.
When enabled, this device acts as a proxy for a LAN host making requests
to join and leave multicast groups, or a multicast router sending multicast
packets to multicast group on the WAN side.
When you enable IGMP Proxy, make sure IGMP is also enabled on the WAN
interface (upstream) that connects to a router running IGMP. You must also
enable IGMP on the LAN interface (downstream) that is connected to hosts.