C
HAPTER
13
| Security Measures
DoS Protection
– 366 –
dynamic DHCP snooping entries to flash memory. These entries will be
restored to the snooping table when the switch is reset. However, note
that the lease time shown for a dynamic entry that has been restored
from flash memory will no longer be valid.
◆ Clear – Removes all dynamically learned snooping entries from flash
memory.
WEB INTERFACE
To display the binding table for DHCP Snooping:
1. Click IP Service, DHCP, Snooping.
2. Select Show Information from the Step list.
3. Use the Store or Clear function if required.
Figure 201: Displaying the Binding Table for DHCP Snooping
DOS PROTECTION
Use the Traffic > Packet Flow page to protect against denial-of-service
(DoS) attacks. A DoS attack is an attempt to block the services provided by
a computer or network resource. This kind of attack tries to prevent an
Internet site or service from functioning efficiently or at all. In general, DoS
attacks are implemented by either forcing the target to reset, to consume
most of its resources so that it can no longer provide its intended service,
or to obstruct the communication media between the intended users and
the target so that they can no longer communicate adequately. This section
describes how to protect against DoS attacks.
CLI REFERENCES
â—† "flow tcp-udp-port-zero" on page 708