Chapter 8
| General Security Measures
Denial of Service Protection
– 301 –
dos-protection ipv6
invalid-header-length
This command protects against attacks which send IP packets with an incorrect
header length. Such packets are not allowed by the system, but their abundant
number can cause computer crashes and other system errors.
Syntax
[no] dos-protection ipv6 invalid-header-length
Default Setting
Disabled
Command Mode
Global Configuration
Example
Console(config)#dos-protection ipv6 invalid-header-length
Console(config)#
dos-protection ipv6
invalid-ip-address
This command protects against attacks in which the source IP address and the
destination IP address are the same.
Syntax
[no] dos-protection ipv6 invalid-ip-address
Default Setting
Disabled
Command Mode
Global Configuration
Example
Console(config)#dos-protection ipv6 invalid-ip-address
Console(config)#
dos-protection ipv6
invalid-source-ip-
address
This command protects against attacks in which hackers replace the source address
in packets sent to the victim with an invalid source IPv6 address to protect the
identity of the sender or to mislead the receiver as to the origin and validity of sent
data. These attacks may send a constant stream of packets with an invalid source
address, causing receiver to respond in the desired manner, while continuing to
hide the identity of the attacker. This type of attack is especially effective since the
packets seem to come from different sources and thus making the perpetrators
hard to trace.
To Next Page
Loading...
Need help?
General
