NETGEAR GS748T - Page 46

46
GS748T Smart Switch
Fragment DoS prevention causes the switch to drop packets that have an IP fragment
offset equal to 1. The factory default is disabled.
• Denial of Service Min TCP Hdr Size: Specifies the Min TCP Hdr Size allowed. If
First TCP Fragment DoS prevention is enabled, then the switch will drop packets that
have a TCP header smaller than this configured Min TCP Hdr Size. The factory
default is 20.
• Denial of Service TCP Fragment: TCP Header size is smaller than the configured
value. Enable or disable this option by selecting the corresponding line on the radio
button. Enabling TCP Fragment DoS prevention causes the switch to drop packets
that have a TCP header smaller than the configured Min TCP Hdr Size. The factory
default is disabled.
• Denial of Service TCP Flag: Enable or disable this option by selecting the
corresponding line on the radio button. Enabling TCP Flag DoS prevention causes
the switch to drop packets that have TCP flag SYN set and TCP source port less than
1024 or TCP control flags set to 0 and TCP sequence number set to 0 or TCP flags
FIN, URG, and PSH set and TCP sequence number set to 0 or both TCP flags SYN
and FIN set. The factory default is disabled.
• Denial of Service L4 Port: Enable or disable this option by selecting the
corresponding line on the radio button. Enabling L4 Port DoS prevention causes the
switch to drop packets that have TCP/UDP source port equal to TCP/UDP destination
port. The factory default is disabled.
• Denial of Service ICMP: Enable or disable this option by selecting the corresponding
line on the radio button. Enabling ICMP DoS prevention causes the switch to drop
ICMP packets that have a type set to ECHO_REQ (ping) and a size greater than the
configured ICMP Pkt Size. The factory default is disabled.
• Denial of Service Mx ICMP Pkt Size: If ICMP DoS prevention is enabled and if the
ICMP echo request is carried in an unfragmented IPv4/IPv6 datagram and if the total
length (in the IP header) indicates a value greater than MAX ICMP Size configured +
IP header length, then the specified packet is dropped. The factory default is 512.
2. If you change any of the DoS settings, click Apply to apply the changes to the switch.
3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to
the latest value of the switch.