Cisco 300 Series

Denial of Service (DoS) Commands
OL-32830-01 Command Line Interface Reference Guide 366
16
/prefix-length}} |
remove {ip-address {mask | /prefix-length}}, and removes all
entries added by the user. The user can remove a specific entry by using remove
ip-address {mask | /prefix-length} parameter.
There is no no form of the security-suite deny martian-addresses
reserved {add |
remove}
command. Use instead the security-suite deny martian-addresses
reserved
remove command to remove protection (and free up hardware
resources).
Parameters
• reserved add/remove—Add or remove the table of reserved addresses
below.
• ip-address—Adds/discards packets with the specified IP source or
destination address.
• mask—Specifies the network mask of the IP address.
• prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
• reserved—Discards packets with the source or destination IP address in
the block of the reserved (Martian) IP addresses. See the User Guidelines
for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
For this command to work, show security-suite configuration must be enabled
globally.