NetApp CN1610 - Page 579

576 Denial of Service Commands
Max ICMPv4 Payload
Size
The maximum ICMPv4 payload size to accept when
ICMPv4 DoS protection is enabled.
ICMPv6 Mode The administrative mode of ICMPv6 DoS
prevention. When enabled, this causes the switch to
drop ICMP packets that have a type set to
ECHO_REQ (ping) and a size greater than the
configured ICMPv6 Payload Size.
Max ICMPv6 Payload
Size
The maximum ICMPv6 payload size to accept when
ICMPv6 DoS protection is enabled.
ICMPv4 Fragment
Mode
The administrative mode of ICMPv4 Fragment DoS
prevention. When enabled, this causes the switch to
drop fragmented ICMPv4 packets.
TCP Port Mode The administrative mode of TCP Port DoS
prevention. When enabled, this causes the switch to
drop packets that have the TCP source port equal to
the TCP destination port.
UDP Port Mode The administrative mode of UDP Port DoS
prevention. When enabled, this causes the switch to
drop packets that have the UDP source port equal to
the UDP destination port.
SIPDIP Mode The administrative mode of SIP=DIP DoS
prevention. Enabling this causes the switch to drop
packets that have a source IP address equal to the
destination IP address. The factory default is
disabled.
SMACDMAC Mode The administrative mode of SMAC=DMAC DoS
prevention. Enabling this causes the switch to drop
packets that have a source MAC address equal to the
destination MAC address.
TCP FIN&URG&
PSH Mode
The administrative mode of TCP FIN & URG &
PSH DoS prevention. Enabling this causes the
switch to drop packets that have TCP flags FIN,
URG, and PSH set and TCP Sequence Number = 0.
Term Definition