MANAGING SWITCH
87
The following table describes the items in the previous figure.
The ensuing table for DoS Global Information settings are informational only: DMAC =
SMAC, Land Attack, UDP Blat, TCP Blat, POD (Ping of Death), IPv6 Min Fragment Size,
ICMP Fragment Packets, IPv4 Ping Max Packet Size, IPv6 Ping Max Packet Size, Smurf
Table 4-57. Security > DoS Prevention > DoS Global Settings
Item Description
DMAC = SMAC Click Enabled or Disabled to define DMAC-SMAC for the DoS Global
settings.
LAND Click Enabled or Disabled to define LAND for the DoS Global settings.
UDP Blat Click Enabled or Disabled to define UDP Blat for the DoS Global settings.
TCP Blat Click Enabled or Disabled to define TCP Blat for the DoS Global settings.
POD Click Enabled or Disabled to define POD for the DoS Global settings.
IPv6 Min Fragment Click Enabled or Disabled to define minimum fragment size for the IPv6
protocol.
Enter the variable in bytes (0 to 65535) to set the minimum fragment size
when the function is enabled.
ICMP Fragments Click Enabled or Disabled to define the ICMP Fragments function.
IPv4 Ping Max Size Click Enabled or Disabled to set the maximum ping size for the IPv4
protocol.
IPv6 Ping Max Size Click Enabled or Disabled to set a maximum ping size for the IPv6
protocol.
Ping Max Size
Setting
Enter the variable in bytes (0 to 65535) to set the maximum ping size.
Smurf Attack Click Enabled or Disabled to set the Smurf Attack function.
TCP Min Hdr Size Click Enabled or Disabled to set the minimum header size.
Enter the variable in bytes (0 to 31) to set the minimum header size.
TCP-SYN (SPORT <
1024)
Click Enabled or Disabled to set the TCP synchronization function (sport <
1021).
Null Scan Attack Click Enabled or Disabled to set the Null Scan Attack function.
X-Mas Scan Attack Click Enabled or Disabled to set the X-Mas Scan function.
TCP SYN-FIN Attack Click Enabled or Disabled to set the TCP synchronization termination
attack function.
TCP SYN-RST
Attack
Click Enabled or Disabled to set the TCP synchronization reset attack
function.
TCP Fragment
(Offset = 1)
Click Enabled or Disabled to set the TCP fragment function (offset =1).
Apply Click Apply to save the values and update the screen.