Cisco 300 Series User Manual

Denial of Service (DoS) Commands
OL-32830-01 Command Line Interface Reference Guide 366
16
/prefix-length}} |
remove {ip-address {mask | /prefix-length}}, and removes all
entries added by the user. The user can remove a specific entry by using remove
ip-address {mask | /prefix-length} parameter.
There is no no form of the security-suite deny martian-addresses
reserved {add |
remove}
command. Use instead the security-suite deny martian-addresses
reserved
remove command to remove protection (and free up hardware
resources).
Parameters
• reserved add/remove—Add or remove the table of reserved addresses
below.
• ip-address—Adds/discards packets with the specified IP source or
destination address.
• mask—Specifies the network mask of the IP address.
• prefix-length—Specifies the number of bits that comprise the IP address
prefix. The prefix length must be preceded by a forward slash (/).
• reserved—Discards packets with the source or destination IP address in
the block of the reserved (Martian) IP addresses. See the User Guidelines
for a list of reserved addresses.
Default Configuration
Martian addresses are allowed.
Command Mode
Global Configuration mode
User Guidelines
For this command to work, show security-suite configuration must be enabled
globally.

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48