D-Link DXS-1210-16TC - Page 121

DXS-1210 Series Smart Managed Switch CLI Reference Guide
118
• TCP-tiny-frag: Tiny TCP Fragment attacker uses the IP fragmentation to create extremely
small fragments and force the TCP header information into a separate packet fragment to
pass through the check function of the router and issue an attack.
• All: All of above types.
Example
This example shows how to enable the DoS prevention mechanism for land attack.
Switch# configure terminal
Switch(config)# dos-prevention land
Switch(config)#
This example shows how to enable the DoS prevention mechanism on all supported types.
Switch# configure terminal
Switch(config)# dos-prevention all
Switch(config)#
This example shows how to disable the DoS prevention mechanism for all supported types.
Switch# configure terminal
Switch(config)# no dos-prevention all
Switch(config)#
16-2 show dos-prevention
This command is used to display the DoS prevention status and related drop counters.
show dos-prevention [DOS-ATTACK-TYPE]
Parameters
DOS-ATTACK-TYPE
(Optional) Specifies the DoS type to be displayed.
Default
None.
Command Mode
EXEC Mode or Any Configuration Mode.
Command Default Level
Level: 1.
Usage Guideline
Use this command to display information about DoS prevention.
Example
This example shows how to display the configuration information of the DoS prevention.