D-Link xStack DGS-3120 Series User Manual

xStack
®
DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide
286
Chapter 23 Denial-of-Service (DoS)
Attack Prevention
Command List
config dos_prevention dos_type [{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan |
tcp_synfin | tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack}(1) | all]
{action [drop] | state [enable | disable]}(1)
show dos_prevention {land_attack | blat_attack | tcp_null_scan | tcp_xmasscan | tcp_synfin |
tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack}
config dos_prevention trap [enable | disable]
config dos_prevention log [enable | disable]
23-1 config dos_prevention dos_type
Description
This command is used to prevent the DoS attack from specific ports.
Format
config dos_prevention dos_type [{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan
| tcp_synfin | tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack}(1) | all]
{action [drop] | state [enable | disable]}(1)
Parameters
land_attack - Specify the type of DoS attack as land attack.
blat_attack - Specify the type of DoS attack as blat attack.
tcp_null_scan - Specify the type of DoS attack as TCP null scan.
tcp_xmasscan - Specify the type of DoS attack as TCP xmasscan.
tcp_synfin - Specify the type of DoS attack as TCP synfin.
tcp_syn_srcport_less_1024 - Specify the type of DoS attack as tcp_syn_srcport_less_1024.
ping_death_attack - Specify the type of DoS attack as ping_death_attack.
tcp_tiny_frag_attack - Specify the type of DoS attack as tcp_tiny_frag_attack.
all - Specify all types of DoS attack.
action - When the DoS prevention is enabled, the following action can be taken.
drop - Drop DoS attack packets.
state - Specify the DoS attack prevention state.
enable - Enable the DoS attack prevention.
disable - Disable the DoS attack prevention.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure land attack and blat attack prevention, the action is drop:

D-Link xStack DGS-3120 Series Specifications

General

MAC Address Table	16K entries
Ports	10/100/1000BASE-T ports
VLANs	4094
Jumbo Frame	Up to 9KB
Power Supply	Internal power supply (depending on model)
Power over Ethernet (PoE)	No
Layer 3 Features	RIP
Quality of Service (QoS)	8 queues per port, DiffServ
Security Features	ACLs
Management	Web-based, CLI, SNMP
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
SFP Ports	Combo 10/100/1000BASE-T/SFP ports and/or dedicated SFP/SFP+ ports (depending on model)