Cisco 300 Series User Manual

Denial of Service (DoS) Commands
367 OL-32830-01 Command Line Interface Reference Guide
16
security-suite deny martian-addresses reserved adds or removes the addresses
in the following table:
Note that if the reserved addresses are included, individual reserved addresses
cannot be removed.
Example
The following example discards all packets with a source or destination address in
the block of the reserved IP addresses.
switchxxxxxx(config)# security-suite deny martian-addresses reserved add
16.4 security-suite deny syn
To block the creation of TCP connections from a specific interface, use the
security-suite deny syn Interface (Ethernet, Port Channel) Configuration mode
command. This a complete block of these connections.
To permit creation of TCP connections, use the no form of this command.
Address Block Present Use
0.0.0.0/8 (except
when 0.0.0.0/32 is
the source
address)
Addresses in this block refer to source hosts
on "this" network.
127.0.0.0/8 This block is assigned for use as the Internet
host loopback address.
192.0.2.0/24 This block is assigned as "TEST-NET" for use
in documentation and example code.
224.0.0.0/4 as
source
This block, formerly known as the Class D
address space, is allocated for use in IPv4
multicast address assignments.
240.0.0.0/4 (except
when
255.255.255.255/3
2 is the destination
address)
This block, formerly known as the Class E
address space, is reserved.

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48