NetApp CN1610 - No Dos-Control All; Dos-Control Sipdip; No Dos-Control Sipdip; Dos-Control Firstfrag

Chapter 5: Switching Commands 567
no dos-control all This command disables Denial of Service prevention checks globally.
dos-control sipdip This command enables Source IP address = Destination IP address (SIP = DIP)
Denial of Service protection. If the mode is enabled, Denial of Service prevention
is active for this type of attack. If packets ingress with SIP = DIP, the packets will
be dropped if the mode is enabled.
no dos-control
sipdip
This command disables Source IP address = Destination IP address (SIP = DIP)
Denial of Service prevention.
dos-control firstfrag This command enables Minimum TCP Header Size Denial of Service protection.
If the mode is enabled, Denial of Service prevention is active for this type of
attack. If packets ingress having a TCP Header Size smaller then the configured
value, the packets will be dropped if the mode is enabled.The default is
disabled. If you enable dos-control firstfrag, but do not provide a Minimum
TCP Header Size, the system sets that value to
20.
Mode Global Config
Format
no dos-control all
Mode Global Config
Default disabled
Format
dos-control sipdip
Mode Global Config
Format
no dos-control sipdip
Mode Global Config
Default disabled (20)
Format
dos-control firstfrag [ 0-255 ]