NETGEAR M4100 Series User Manual

Manage Device Security
299
M4100 Series Managed Switch
13. Use Denial of Service First Fragment to enable first fragment DoS prevention.
First fragment DoS prevention causes the switch to check DoS options on first fragment
IP packets when switch are receiving fragmented IP packets. Otherwise, the switch
ignores the first fragment IP packages.The factory default is disabled.
14. Use Denial of Service ICMP Fragment to enabling ICMP fragment DoS prevention.
ICMP fragment DoS prevention causes the switch to drop ICMP fragmented packets. The
factory default is disabled.
15. Use Denial of Service SIP=DIP to enable SIP=DIP DoS prevention.
This causes the switch to drop packets with a source IP address equal to the destination
IP address. The factory default is disabled.
16. Use Denial of Service SMAC=DMAC to enable SMAC=DMAC DoS prevention.
This causes the switch to drop packets with a source MAC address equal to the
destination MAC address. The factory default is disabled.
17. Use Denial of Service TCP FIN&URG&PSH to enable TCP FIN & URG & PSH DoS
prevention.
This causes the switch to drop packets with TCP flags FIN, URG, and PSH set and TCP
Sequence Number=0. The factory default is disabled.
18. Use Denial of Service TCP Flag &Sequence to enable TCP flag DoS prevention.
This causes the switch to drop packets with TCP control flags set to 0 and TCP sequence
number set to 0. The factory default is disabled.
19. Use Denial of Service TCP Fragment to enable TCP fragment DoS prevention.
This causes the switch to drop packets:
• First TCP fragments that has a TCP payload: IP_Payload_Length - IP_Header_Size
< Min_TCP_Header_Size.
• The factory default is disabled.
20. Use Denial of Service TCP Offset to enable TCP offset DoS prevention.
This causes the switch to drop packets with a TCP header Offset=1. The factory default is
disabled.
21. Use Denial of Service TCP Port to enable TCP port DoS prevention.
This causes the switch to drop packets with TCP source port equal to TCP destination
port. The factory default is disabled.
22. Use Denial of Service TCP SYN to enable TCP SYN DoS prevention.
This causes the switch to drop packets with TCP flags SYN set. The factory default is
disabled.
23. Use Denial of Service TCP SYN&FIN to enable TCP SYN & FIN DoS prevention.
This causes the switch to drop packets with TCP flags SYN and FIN set. The factory
default is disabled.

NETGEAR M4100 Series Specifications

General

Model	M4100 Series
Switch Type	Managed
Form Factor	Rack-mountable
Port Configuration	24 or 48 ports
Ethernet Ports	10/100/1000 Mbps
PoE Support	Available on some models (PoE and PoE+)
Layer	Layer 2/Layer 3
Management	Web-based, CLI, SNMP
VLAN Support	Yes
QoS	Yes
Stackable	Yes
Ports	24 or 48
Jumbo Frame Support	Yes
Security Features	ACL, 802.1X, RADIUS, TACACS+
Operating Temperature	0° to 50° C (32° to 122° F)
Storage Temperature	-20° to 70° C (-4° to 158° F)
Power Supply	Internal power supply