Alcatel-Lucent OmniAccess 5740 - Icmp-Ip-Address-Sweep

icmp-ip-address-sweep
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
715
Alcatel-Lucent
Beta Beta
OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide
ICMP-IP-ADDRESS-SWEEP
icmp-ip-address-sweep [threshold <1-4294967295> <1-4294967295>]
DESCRIPTION
This command is entered in the Firewall-Attack Sub Configuration Mode. An
address sweep attack occurs when a source IP address sends number of ICMP
echo requests (or pings) to different hosts within a defined interval. The purpose
of this scheme is to ping several hosts in the hope that one will reply, thus
uncovering an address to target, resulting in system failure. This command is
included in the OmniAccess 5740 USG’s default attack prevention list.
PARAMETERS
DEFAULT VALUE
The default is 100 packets in 1000 milliseconds.
EXAMPLE
ALU(config-firewall-attack-A1)# icmp-ip-address-sweep threshold
18 6
Parameter Description
threshold Threshold limit set.
<1-4294967295> <1-4294967295> Number of packets permissible within a
defined interval.