Cisco SGE2000 - Cisco - Gigabit Switch Administration Guide

Configuring Device Security
Defining DoS Prevention
Cisco Small Business SFE/SGE Managed Switches Administration Guide 123
4
STEP 4 Click Apply. The ACL binding is defined, and the device is updated.
Defining DoS Prevention
Denial of Service (DOS) increases network security by preventing packets with
invalid IP addresses from entering the network. DoS eliminates packets from
malicious networks which can compromise a network’s stability.
The device provides a Security Suite that allows administrators to match, discard,
and redirect packets based on packet header values. Packets which are
redirected are analyzed for viruses and Trojans.
DoS enables network managers to:
• Deny packets that contain reserved IP addresses
• Prevent TCP connections from a specific interface
• Discard echo requests from a specific interface
• Discard IP fragmented packets from a specific interface
The DoS Prevention section contains the following topics:
• DoS Global Settings
• Defining Martian Addresses
DoS Global Settings
The Global Settings Page allows network managers to enable and define global
DoS attack prevention parameters on the device. To open the
Global Settings
Page
:

Cisco SGE2000 - Cisco - Gigabit Switch Specifications

General

Form Factor	Rack-mountable
Switching Capacity	48 Gbps
Forwarding Rate	35.7 Mpps
Layer	Layer 2
Power Supply	Internal
Management	Web-based, SNMP, CLI
MAC Address Table Size	8000 entries
VLANs	256
Features	Quality of Service (QoS), IGMP snooping, Port mirroring
Dimensions (W x D x H)	440 x 257 x 44 mm (17.3 x 10.1 x 1.73 in)
Operating Temperature	0°C to 40°C (32°F to 104°F)
Storage Temperature	-20 to 70°C (-4 to 158°F)
Relative Humidity	10% to 90% non-condensing
Standards Compliance	IEEE 802.3, IEEE 802.3u, IEEE 802.3ab, IEEE 802.3x