Alcatel-Lucent OmniSwitch 6250 - Ip Dos Scan Tcp Open-Port-Penalty

IP Commands
page 29-72 OmniSwitch 6250 CLI Reference Guide November 2009
ip dos scan tcp open-port-penalty
Assigns a penalty value to be added to the Denial of Service penalty scan value when a TCP packet is
received on an open port.
ip dos scan tcp open-port-penalty penalty_value
Syntax Definitions
penalty_value A penalty value added to the penalty scan value. This value can be any
non-negative integer.
Defaults
Platforms Supported
OmniSwitch 6250
Usage Guidelines
• This command creates a point value that is added to the total port scan penalty value when a TCP
packet is received that is destined for an open port.
• The switch does not distinguished between a legal TCP packet and a port scan packet.
Examples
-> ip dos scan tcp open-port-penalty 10
Release History
Release 6.6.1; command was introduced.
Related Commands
MIB Objects
alaDoSConfig
alaDoSPortScanTcpOpenPortPenalty
parameter default
penalty_value 0
ip dos scan threshold Sets the threshold for the port scan value, at which a DoS attack is
recorded.
ip dos trap Sets whether the switch generates SNMP DoS traps when an attack
is detected.