Chapter 24: General Security Measures
Denial of Service Protection
– 885 –
rate
– Maximum allowed rate. (Range: 64-2000 kbits/second)
D
EFAULT
S
ETTING
Disabled, 1000 kbits/second
C
OMMAND
M
ODE
Global Configuration
E
XAMPLE
Console(config)#dos-protection echo-chargen 65
Console(config)#
dos-protection
smurf
This command protects against DoS smurf attacks in which a perpetrator
generates a large amount of spoofed ICMP Echo Request traffic to the
broadcast destination IP address (255.255.255.255), all of which uses a
spoofed source address of the intended victim. The victim should crash due
to the many interrupts required to send ICMP Echo response packets. Use
the
no
form to disable this feature.
S
YNTAX
[
no
]
dos-protection smurf
D
EFAULT
S
ETTING
Enabled
C
OMMAND
M
ODE
Global Configuration
E
XAMPLE
Console(config)#dos-protection smurf
Console(config)#
dos-protection
tcp-flooding
This command protects against DoS TCP-flooding attacks in which a
perpetrator sends a succession of TCP SYN requests (with or without a
spoofed-Source IP) to a target and never returns ACK packets. These
half-open connections will bind resources on the target, and no new
connections can be made, resulting in a denial of service. Use the
no
form
to disable this feature.
S
YNTAX
dos-protection tcp-flooding
[
bit-rate-in-kilo
rate
]
no
dos-protection tcp-flooding
rate
– Maximum allowed rate. (Range: 64-2000 kbits/second)
Содержание SSE-G2252
Страница 42: ...44 General IP Routing on page 627...
Страница 174: ...Chapter 6 VLAN Configuration Configuring VLAN Mirroring 178 Figure 6 27 Showing the VLANs to Mirror...
Страница 511: ...Chapter 14 Basic Administration Protocols UDLD Configuration 518 Figure 14 100 Displaying UDLD Neighbor Information...
Страница 603: ...Chapter 16 IP Configuration Setting the Switch s IP Address IP Version 6 609...
Страница 883: ...Chapter 24 General Security Measures Port based Traffic Segmentation 894...
Страница 989: ...Chapter 30 Congestion Control Commands Automatic Traffic Control Commands 1000 Console...
Страница 1007: ...Chapter 33 Address Table Commands 1019...
Страница 1137: ...Chapter 38 Quality of Service Commands 1150...
Страница 1366: ...Chapter 46 IP Routing Commands Global Routing Configuration 1381 Connected 2 Total 2 FIB 0 Console...