For more information about these commands, see SYN cookies configuration commands on
page 55 .
For more information about these commands, see the Avaya Branch Gateway G430 CLI
Reference.
SYN cookies configuration commands
For more information about these commands, see the Avaya Branch Gateway G430 CLI
Reference.
Command Description
clear tcp syn-
cookies counters
Clear the SYN cookies counters
show tcp syn-
cookies
Show SYN cookies statistics for inbound TCP connections
tcp syn-cookies Enable or disable the TCP SYN cookies defense mechanism
against SYN attacks
Managed Security Services
Branch Gateway IP interfaces and gateway applications such as WAN routers, PoE switches,
and VPN devices can be at risk for DoS attacks. The Branch Gateway identifies predefined or
custom-defined traffic patterns as suspected attacks and generates SNMP notifications,
referred to as Managed Security Services (MSS) notifications.
Related topics:
MSS reporting mechanism on page 55
Configuring MSS on page 56
DoS attack classifications on page 57
Custom DoS classifications on page 58
Example of configuring MSS notifications using ACL rules on page 60
MSS configuration CLI commands on page 60
MSS reporting mechanism
MSS notifications are sent to the active MGC by the dynamic trap manager. MSS notifications
sent to the active MGC by the dynamic trap manager are converted to syslog messages by
the SNMP trap manager on the MGC. For general information about configuring and enabling
Special security features
Administering Avaya G430 Branch Gateway October 2013 55