NetApp CN1610 - Page 581

578 Denial of Service Commands
TCP Flag & Sequence
Mode
The administrative mode of TCP Flag DoS
prevention. Enabling this causes the switch to drop
packets that have TCP control flags set to 0 and TCP
sequence number set to 0.
TCP SYN Mode The administrative mode of TCP SYN DoS
prevention. Enabling this causes the switch to drop
packets that have TCP Flags SYN set.
TCP SYN & FIN
Mode
The administrative mode of TCP SYN & FIN DoS
prevention. Enabling this causes the switch to drop
packets that have TCP Flags SYN and FIN set.
TCP Fragment Mode The administrative mode of TCP Fragment DoS
prevention. Enabling this causes the switch to drop
packets that have a TCP payload in which the IP
payload length minus the IP header size is less than
the minimum allowed TCP header size.
TCP Offset Mode The administrative mode of TCP Offset DoS
prevention. Enabling this causes the switch to drop
packets that have a TCP header Offset equal to 1.
Term Definition